Why not split the difference and do both. Hdd for storage and SSD for services/containers. To help with the power load/performance hit I’d recommend using a usb to sata adapter that has external power. Overall though it sounds like a micro optipl x would be great for you. They’re cheap, more powerful, but still sip power, and usually can fit nvme and 2.5" drives together.
As said in another comment a bare metal Debian install likely wouldn’t be very smooth, or you’d have to run it within Android. Alternatively, if you want to run Linux directly on the phone you could try postmarketOS https://wiki.postmarketos.org/wiki/OnePlus_5T_(oneplus-dumpling)
I can’t help as much with the exposing outward (I’m a basic bitch and just use ddns to expose mine since I can’t get a dedicated IP) but a separate vlan with rules to allow your primary vlan devices to see/talk to it, and block it to be able to see out of it’s own VLAN, would definitely be recommended.