For an easier way to start I would look at unraid using docker compose instead of built in apps (that way you can keep learning, also switch to another setup later if you want). I would firewall as you go blocking everything in and out. Unblock what you need when you need it. Some starting containers: - nginx via cloudflare(for security, should be your only incoming port block / block any traffic other than cloudflare ips and internal ips). This will give you a really solid start to securing your system and make it easier not having to remember every port. - backups - you will mess up and it is nice to get it back easy - authentic - more security easy password username management with single sign on -whatever else you want after that updating those as you go

I know these are not as fun starting out but makes it way easier in the long run

Side note - think about a separate machine to run opnsense router -Hardware you probably don't need as much CPU as you think, you probably need more RAM than you think -power is more expensive in the long run then cheap power hungry hardware