No need to expose your database port for administration, especially for a self-hosted database. You can administer your DB using MySQL Workbench via an SSH connection which will add a layer of security on top of your connection.