I have a Server powered by macOS Server on macOS Sierra. It serves as a file (AFP & SMB) server, VPN Server, and Web Server. It already has SSH enabled. I was wondering if it is safe to enable VNC file sharing on the remote Mac. You would be required to type in the Admin password to connect and then the same Admin password to login. My idea would be to set it up so it only allows access from a certain DDNS (XXXXXX.dddns.net, because I don't have a static address). And I would change the DDNS to the IP of where I would like to remotely access it.
I was wondering if this is safe and good practice. The other idea would be to VNC through an SSH tunnel.