Cloudflare is a good start, start a Google cloud trial as well and set up oauth2 for logging into your public cloudflare tunnels so you're not solely relying on the strength of your services' passwords. It's been working very well for my lab as of late.