Selfhosting, Fastweb and other questions!

Hi, I recently tiptoed into the beautiful world of sefhosting and am starting to put together various pieces of knowledge scattered around the web.

I’ll get straight to the point, I have a server machine running debian 12 in which I have installed -through docker- the whole *rr suite (radarr, sonarr, etc) and in addition I am using jellyfin as a media player. I then switched to PiHole and my next steps would be to try:

• Nextcloud for storing personal files
• Bitwarden

Questions:

I currently have a natted IP from my ISP, however they told me they can give me a public and static IP.

So the next step would be to open only the port for VPN (wireguard) on my modem. In this way am I covered from being exposed on the Internet or is there anything else I should know?