shred or alternatively you can zero out all the bytes in a drive with dd if=/dev/zero of=/dev/<DRIVE>

it’s great but doesn’t cover email, that you have to do yourself/with a provider

if you know/use docker, the solution that has been the most straightforward for me is SWAG. the setup process is fairly easy when combined with registering your domain with Porkbun, as they allow free API access needed for obtaining top-level (example.com) as well as wildcard (*.example.com) SSL certificates.

along with that, exposing a new service is fairly easy with the plethora of already included nginx configs for services like Nextcloud, Syncthing, etc.