I have decided to buy public facing IP for my broadband... Need help

Hello everyone, i hope you are having wonderful day today!

Today i have decided to buy public ip for my broadband. But my homenetwork will be exposed publicly, i am using 1 tp-link openwrt router, with limited specs. What is the best security practice that i can do with my openwrt router to secure my homenetwork?

I want to expose windows server RDP and some other services such as web server, etc..

I have no advice as I’m a noob, but which ISP do you have?

I fought with airtel to get ipv6 and registered it in a ddns service. That way I dont have to pay for static public ip4.

Does BSNL provide static ip? Can I also ask for ipv6 from BSNL?

Alliance broadband

Only BSNL support can answer this, but i think they provide static ipv4, ipv6 isnt something you should worry about because most things still run on ipv4.. if ipv6 is there you can just DDNS it but make sure it isn’t under CGNAT