How else would I? Not exposing it to the WAN and with StarLink, VPN is the solution. Though not a network guy either.

Portainer - For docker containers.

AdGuard Home on 2 separate Raspberry Pi Pico W.

HomeAssistant on its own hardware. Home automation

SearXNG - private search.

Whoogle - private search.

Shaarli - Bookmarks.

youtube-dl - downloading videos.

PaperlessNGX - document storage.

Trilium Notes - notes app

These are the ones I can’t live without. All docker containers running on a NAS.