Absolutely essential is using a firewall and set it as strict as possible. Use MAC like SELinux or Apparmor. This is extremely overkill for a personal server, but you may also compile everything yourself and enable as many hardening flags as possible and compile your own kernel with as many mitigations and hardening flags enabled (also stripped out of features you don’t need)

Sidenote: If you just want a nice web frontend for others to view your Git repositories, you can use cgit instead.

We get around it! :)

I’m not sure if this is a good idea. Would people seriously pay just to access some subreddit? Why wouldn’t they go on another forum?