Ubuntu VPS Firewall, Port Forward and Proxy Configuration

Hi, This project is a home setup where I need to publish some services (Like Plex, CCTV, etc) and my internet provider does not offer public IP. My solution: An Ubuntu 18.04 VPS with a dedicated IP to establish a tunnel from my home. That tunnel will also allow to serve the services and pages I need. Working: OpenVPN Server Service on the VPS and a client from my home router. I am able to ping between the two hosts. Successfully installed Apache2 and Let’s Encrypt certificates for securing certain websites on the internal services/devices as proxies. Installed Webmin to configure certain aspects of the server and management. Ports are open for local services at the VPS: SSH (TCP22), HTTPS (TCP443), OpenVPN Server at VPS (UDP443) and Webmin (TCP10000). What is not working: Firewall and Port Forward rules are somewhat broken. The VPS Provider confirmed that ports TCP8123, TCP8090 and UDP1194 are open but close at the Ubuntu software firewall and they are not routed to the OpenVPN tunnel. I have four total proxy pages working pointing to the correct local (home) for accessing the NAS, my Plex Server and my Unraid Server but, one of my proxy domain names is not working correctly. It is to access the application of homeassistant application via port 8123 and uses websocket API. The proxy will let me access the webpage via [login to view URL] but when I authenticate it will tell me that it cannot load the system. Relevant Links for the proxy: [login to view URL] and [login to view URL] End result of project: I am able to access the services published at home from the cloud on ports TCP8123, TCP8090 and UDP1194. The proxy works past authentication page for homeassistant. Professional: Looking for a Linux Firewall and Web expert that can pinpoint the details that I cannot find and to advise on security improvements to show the cloud the minimum required.