Reverse proxy + LetsEncrypt + DuckDNS + DNS rewrite to point it at local IP is all you need. Works quite well for all my services.

I prefer Keepass as it is less faff as a password manager is too critical to host like this imo.

Uptime Kuma and ntfy.

Late to the party on this one, but Tutanota has been great for me. I prefer the fully encrypted storage. They recently put their prices up, though. It was €12 a year.