For some additional peace of mind, you could also use something like Authentik in front of your web apps, so you don't expose the apps themselves, only Authentik. You can then use the IDP of your choice within Authentik for authentication.
A perfect example of why one should use SSH over a mesh network like Tailscale, and don't expose over the public internet. No attack surface means no attack.
Unraid is nice, and pretty easy to maintain. You get a web interface and can set up auto updates. There a many different applications in their app store, too, or you can make your own using plain docker.
I love your HR comment. It's HR's literal job to interview / hire people. It's not the job of the candidate to interview for a position. Deluded, self-important lunatics.
I'm in Ireland, but have recently been diagnosed by a UK doctor as having ADHD. If you go privately, it's not a terrible process, and my local GP is willing to prescribe as my UK ADHD expert advises. Granted, medication has had no positive impact on me so far, but getting the diagnosis was pretty straightforward.