Should my NAS be on the management VLAN or the Services VLAN?

Hello,

I am building a NAS to add to my homelab and I was wondering what is the best way to interface it to the rest of my services.

I have a beelink s12 mini pc as my server that runs proxmox, and I bought a Radxa Rock5C thats runs OpenMediaVault with a hat for 5 sata drives to act as a NAS.

I have a few VLAN to isolate different part of my network. Proxmox interface is accessible through the management VLAN (99) and the services it host have the Services VLAN (20) for the network. The Services VLAN is only accessible through a Wireguard interface and has access to internet.

So my question is as follows :

Should my new NAS be on the management VLAN (99) or on the Services VLAN (20)?

I was thinking of never allowing users to access the NAS directly and assign the space I need through NFS shares passed through the proxmox server as a mounted drive. That would isolate the NAS into the management VLAN and not expose it on the Services VLAN where the rules are looser. Is that a sensible thing to do?

Otherwise, what are my options to properly map the NAS?

Thanks