Nginx.

And it proxies Jellyfin, navidrome, audiobookshelf, romm, homeassistant, and immich.

I provide the ports via a ssh port forward per service, from the app servers. Auto-reestablishes on internal IP change or tunnel breaks.

Its 0 touch.