I currently (until I eventually get around to setting up a jump sever) use this exact setup. This is because CF tunnel is free, easy, and bypasses any ISP-level tomfoolery that blocks port forwarding, which the last being the most crucial to me.

I will eventually get around to setting up my own equivalent tunnel, however that’s not free and not as easy as CF tunnel.

Arch, because I use niche software and the AUR doesn’t always get along with Manjaro very well (ungoogled-chromium-bin is the worst offender). Switched to arch, configured it identically to my manjaro install, and all has been well.

You can tell git to use a specific key for each repo. I have the same situation as you and this is how I handle it.

https://superuser.com/questions/232373/how-to-tell-git-which-private-key-to-use