Please use an ethernet cable, you gonna need to keep that connection spotless and WiFi are vulnerable no matter which protocols, better turn it off.

If I may also add hardened systems, a custom firmware on your router(Rec. Tomato series most updated)/hardware firewall(Rec. pfSense) with a VPS if the network is used for other means, they will help you in the long-term.

It should go without saying if you can’t secure a server, don’t host one. You’re responsible for anything that happens to it & us.