I run a forgejo server on the internet for myself so here’s my two cents.

OpenID or any other log in method is just a way to log in to an account on the forgejo server. With registrations disabled it shouldn’t be able to create an account, so there should be no issue. All the extra auth methods also need to be configured and are disabled by default.

Bot traffic can be pretty horrendous once they find your server, I’d say Anubis is basically a requirement at this point. I would also strongly recommend setting up fail2ban for http and ssh, and disabling ssh password auth.

And then migrate all your podman containers to proxmox

I actually just set something like this up using sentryshot and a random IP camera my dad had laying around. The docs are kinda sparse but it was simple enough to get the camera set up. It supports motion and object detection in software and I think you can set it to just record on one of those events but I haven’t messed with that at all.

Edit: for remote access I’d recommend either wireguard or tailscale. I use plain wireguard without having a static IP and haven’t had it break yet but your mileage may vary.

How do you manage your home server configuration

Poorly, which is to say that I just let borgmatic back up all my compose files and hope for the best