Reverse proxy + LetsEncrypt + DuckDNS + DNS rewrite to point it at local IP is all you need. Works quite well for all my services.

I prefer Keepass as it is less faff as a password manager is too critical to host like this imo.

If you subscribe to their repo in FDroid updates you’ll get automatic updates.

Uptime Kuma and ntfy.

Late to the party on this one, but Tutanota has been great for me. I prefer the fully encrypted storage. They recently put their prices up, though. It was €12 a year.