A lot of good information here so I’ll add something a little different:

Do Not open any services to the internet, such as for remote access, until you are sure about what you are doing. Doing something like opening a port so you can watch Jellyfin anywhere sounds great, but doing it wrong pokes a huge security hole in your infrastructure.

Keep everything in your local network until you have a secure remote access setup. Even your home network may be untrustworthy if you’ve got things like IoT devices or compromised operating systems.