As said in another comment a bare metal Debian install likely wouldn't be very smooth, or you'd have to run it within Android. Alternatively, if you want to run Linux directly on the phone you could try postmarketOS https://wiki.postmarketos.org/wiki/OnePlus_5T_(oneplus-dumpling)
I can't help as much with the exposing outward (I'm a basic bitch and just use ddns to expose mine since I can't get a dedicated IP) but a separate vlan with rules to allow your primary vlan devices to see/talk to it, and block it to be able to see out of it's own VLAN, would definitely be recommended.