You can use a reverse proxy like Caddy or nginx to block, eg, non-local IPs, do subdomain routing, manage certs.