Nextcloud Server, Am I protected Enough?

[deputycag]

Wanted some feedback on my cloud setup.  Hosting my own Nextcloud server on a DMZ and want to be sure I am 99% protected for intrusions.

Nextcloud is on DMZ,  Port forward only 443.  Couldn't get NGINX or HAPROXY working.  So Using Cloudflare WAF.  My firewall has IDS with Telemetry rules enabled to block.  Port Forward and Firewall only allows Cloudflare IP's to access my Nextcloud over SSL.  Turned on most security protection available on Cloudflare.  GEOIP only allows USA

Am I good or should I tweak something with my setup?