Secure svnserve?

Hi,

Currently I'm running svnserve on a Debian VM on my PC. I'd like to
move it to a server on the internet but I don't get how to do this
securely.
Svnserve doesn't support encryption, right, so I can't expose it on a
public port directly.
I'm aware of Subversion via Apache but I don't run Apache and I don't
want to give the entire web server access to repos anyway.
I also don't want to give each SVN user a shell account..
What's the proper way to do this?

Wouldn't it be good if svnserve supported encryption directly?

-- 
Olaf