Reverse Proxy as much as you can so you only have one port, I haven’t found anything I haven’t been able to even Plex, but haven’t done a game server other then minecraft.
Whitelist Geoip location, use crowdsec
I haven’t bothered with network segregation I used too but then revaluated and just realized it wasn’t worth it for me.