Hi,
A domain controller needs a VPN connection , when you have a remote site to ensure authentication or replicate with local domain controller.
It's not recommended to expose a domain controller on internet.
Please don't forget to mark helpful reply as answer