I have a home server running truenas and a bunch of services. I am looking for advice/feedback on whether I have done enough to secure my home network while maintaining external access.

In order to access them I have set up a Cloudflare tunnel to my server. This tunnel allows access exclusively to devices that are on my VPN and originate from my home server address. I also allow access via email verification with a country filter. Anyone outside of my home country is denied access.

Does anyone see any issues with what I use or could harden it in another way?