What’s the best way to connect to a geth rpc remotely?

Set up a node locally! What’s the best way to connect to its http/rpc server remotely? Should I open up the port on my firewall and set http.addr to 0.0.0.0 and just not expose any secure rpc namespaces, or should I try and set up an ssh tunnel. The node is running on windows so having trouble either using a jump host or using this new windows 10 ssh server. Any help would be much appreciated and I’ll let you use the rpc too! Thanks!