@mettlife Start simple. Don't jump unto everything at once. Otherwise you end up trying "eating an elephant in a single bite". And you'll end up needing to redo everything again.
Decide which features is the most important to you. Align that with what seems to be the simplest feature to setup. Get it running well, test it out for some weeks. Then take the next feature, rinse and repeat.
And no matter the feature you dive into ... get a very good understanding of the security perimeters needed and how to lock it down without breaking its functionality. That means diving into firewalling, security modules (SELinux, apparmor).
Learn the technology behind the various "simpler front-end tools". For example, learn how nftables or iptables works, that will help you understand what firewall-cmd and ufw does and why. Or learn how podman (or docker) works, then you'll find the management tools available on top of that easier to understand.
And remember that containers (docker, podman, lxc, etc) are not a security feature by itself. It's merely an administration tool to ease software maintenance without breaking other running features.