Recommended steps for internet-facing containers?

So I'm about to go down the rabbithole of exposing services to the internet, specifically so I can self-host a website for my own portfolio, and also possibly a bookstack instance.

Any good how-tos on doing this that take security conscious practices in mind as well? I assume I want either apache/traefik/nginx to act as a reverse proxy to handle the initial traffic, but from there how do I ensure security? This is definitely not my realm of expertise but I'm willing to learn.