Your rules force all traffic out the gateway.
And the rules below that make no sense, because rules are evaluated top down, first rule to trigger wins, no other rules are evaluated.
So your rule sending traffic out your gateway is any any.. When would there be traffic that does trigger that rules.
When would there be traffic to ! private, that does not match the rule above it any any?
If you want your clients to talk to pfsense IP.. Where do you allow that? You block talking to pfsense on 443, then your next rule says go out the vpn.. How does vpn have access to pfsense vlan30 interface for example?