Do you want to have the site to be public facing? If so, I think your current setup is good.

If it doesn’t need to be public facing, I would use wireguard to VPN into your LAN network, and secure it that way.