Post #39069

I set mine up with HAProxy for TLS offloading and ACME for the server cert. Restrict your access to just your country/region by GeoIP and you are pretty good to go.