Webmin and Virtualmin on VPN

Operating system: CentOS
OS version: 8

I’m setting up my first VPS (where I am the only user) and have some concerns about security. Especially since I tend to set things up and then leave them for months on end.

I’m thinking of this setup:

Public network: Open incoming ports for Web sites and Wireguard
Internal VPS Network: Open incoming ports for everything else (Webmin, virtualmin) and SSH
I’m not sure if I have control over taking SSH off public

The panels would not be accessible unless I connect via VPN into the internal VPS network.

Are there any issues, ramifications related to Webmin and Virtualmin I should know about?