Is there a home network architecture…

Is there a home network architecture that is considered best-practice for people who run nodes and host other services (like Nextcloud, BTCPAYSERVER, etc)? I have an Ubuntu Server hosting my node and Sparrow Server wallet behind a pfsense firewall using a global VPN, but am unsure on the basics of setting up a screened subnet and accessing it remotely.