I’m using Debian, with Docker and running Jellyfin, Nextcloud, Navidrome and Wireguard on Containers on my old laptop. So that would be my suggestion.

You could install CasaOS and/or Portainer, on top of Debian if you want an easier way to manage your server and containers.

Been doing the same, just leaving my password-store offline, for me this is enough.