Make sure to put any of your own personal web services behind some dumb authentication system to avoid most of these things biting you before you hear about them.

I use nginx + basic http auth, since I'm using it for https anyway.