with headless debian, i think you have around 400MB ram left for yourself, enough to run light stuff like pihole or Wireguard