Reverse proxy + LetsEncrypt + DuckDNS + DNS rewrite to point it at local IP is all you need. Works quite well for all my services.

I prefer Keepass as it is less faff as a password manager is too critical to host like this imo.

Don’t forget nuclear fallout. There’s even a term for when humans started to irrevocably fuck Earth: the Anthropocene.

If you subscribe to their repo in FDroid updates you’ll get automatic updates.