For the most part, providing limited access from the outside will leave you vulnerable to someone that actually knows what they are doing. You can limit it, but anytime you create a tunnel in for yourself, someone out there can get in. Now, the likelihood of that person being a criminal looking to rob you would be pretty low.
Something to consider:
Unless you have a business class internet connection, you likely do not have a static IP. This means you have to have a router that can handle Dynamic DNS registration.