I don't expose samba no, but at one point I did run openvpn access. I set the client config for the VPN to only forward 192.168.x.x through the vpn, but not all other traffic. So if I go to a coffee shop, my windows laptop would act entirely like it was still on my lan and my mounted network drive would fully connect as normal.

I removed that service since it was kind of clunky and always had connection issues. Perhaps I should try it again.