Premise firewall lock down

Now that my site is behind CF, should I lock down my premise firewall to only allow traffic from CF?

That’s a great idea. I only allow HTTP/S from Cloudflare IPv4 and IPv6, and SSH from my home IP.