Thats a good point. Maybe I can get away with just temporary file sharing. So when someone wants something I can upload it to the server and send a link. I bet even nextcloud could do that.
Still way less scary then having everything on the server all the time
I had a similar scenario.
My solution was to by a new router, flash it with openwrt, then configure ISP in bridge mode and configure proper firewall on openwrt