Host a website from an old phone using PostmarketOS

In a similar fashion: https://blog.denv.it/posts/pmos-k3s-cluster/

Show HN yesterday: https://news.ycombinator.com/item?id=46016902

But how deal with security and DDoS?