I'm planning on a similar setup and avoid exposing the network directly. Didn't have time to do that yet but I'll look into that this week!