Non Cloud
No you probably don’t need a server in the office.
Next up, don’t make things available to the internet if not needed.
DMZ
Web Server
Mail Server
Non DMZ
Active Directory Server
Databases
Everything else
VLAN (Virtual Logical Area Network)
Ports - disable unnecessary ports from being internet available