you have a good balance OP. I’d consider a DMZ if you’re planning on hosting any public services (or even services at all, check out the ffmpeg exploit that happened last week). other than that I wouldn’t recommend you get any more granular.
the more granular you get with this stuff, the more you have to go through if/when something goes wrong or otherwise doesn’t work. which is great when you have a lot of time on your hands and an obsession with networking, but starts to become a detriment when your interest and time need to be dedicated to other things.
you have a good balance OP. I’d consider a DMZ if you’re planning on hosting any public services (or even services at all, check out the ffmpeg exploit that happened last week). other than that I wouldn’t recommend you get any more granular.
the more granular you get with this stuff, the more you have to go through if/when something goes wrong or otherwise doesn’t work. which is great when you have a lot of time on your hands and an obsession with networking, but starts to become a detriment when your interest and time need to be dedicated to other things.