This is really great advice not just for this situation but in general really. For the proxies/what goes in front, I recommend cloudflare workers.