Nice setup! Make sure to backup those encryption keys offline and maybe even consider 2FA for Nextcloud login. Don’t forget the basic physical security of your NAS as well. It’s a little geek haven and you don't want it walking away during a break-in!