Hey @9toejack
I know it is overwhelming to try to securely publish a web service to the internet. And being hacked adds a completely different set of stress level to it. And I fully understand your requirement for remote access.
However ...
my simple advise to anybody is: if you don't know, what you are doing, then ... do not publish any service to the internet.
This doesn't help you at all now, I know, but the price you'd pay for any consequences might be way bigger than some deleted flows. And there are no links that provide you with a step-by-step guide out there, that you can trust. I f.e. cannot judge whether they are trustworthy, up-2-date or of necessary quality.
I'd better spend some time to find a solution that is manageable for rookies like us. This seems way safer 
Cloudflare has been mentioned. FlowForge as well.
I love Zerotier for its simplicity. see here
