Distorting the model is a lot simpler afaik

Been hosting Public Websites and Gameservers since 2020 from my residential connection and never got ddosed in that time

point the AAAA/A records to your corresponding ips and allow incoming traffic on port 443, 80 on your Firewall. You may also need to set up a dyndns client if your isp changes your ipv4 frequently.

Had the same problem a while ago, you need to regenerate the machineid: https://wiki.debian.org/MachineId