I'm about to go online with my first web site, it is a small project hosted on a regular home PC running Windows 7. I want to keep the software footprint at minimum, so it only contains the operating system and the web server with the website files, no antivirus, no SQL, no nothing. And except for the network cable it is completely isolated from the outside world, no cd/dvd, no keybord, no mouse, no monitor. The Windows firewall is setup to only allow incoming traffic on port 80, all outgoing traffic is blocked.
I am not a network security expert, so please correct me if I'm wrong: I think with this setup, the only possible way to have access the files and folders on that computer is through the web server via port 80, which means: if the web server allows no unauthorized access I can then trust my files will remain private. If I'm wrong, please explain why and how to solve it, again with a minimal software footprint.
Right now my main concern is privacy, so I may ignore advice on other security issues.
I know my web server software will be the target of most attacks, but it is not the main gate which worries me, I know in advance all sorts of people will try to pass through it, so I can be prepared and setup a whole army of police officers right there, what worries me are the possible back doors that may exist without me knowing... so my question is in the sense of how to make the OS fully and completely isolated from the outside world, in such a way that the only possible access point is through my web server listening port 80.