Ask HN: Best Practices for running an internet-accessible Raspberry Pi at home?

Hello,

I would like to use my home Raspberry Pi as a jump box / general purpose server accessible via SSH. What are the current best practices for running an internet-accessible home Linux box? I know SSH pubkeys are the way to go, but what are the gotchas with that method? I've run internet-accessible servers in the past, using SSH and fail2ban. Is that still the preferred method?

Or should I really be running a home AWS/Azure/Google/DigitalOcean instance and use that instead?

Any links to guides or current-day discussions.

Thank you very much!