+1 for NPM. Upgraded option: NPMplus with OpenAppSec as docker containers -- fun to see what attacks it blocks. Takes a bit to get going, but worth it.Would highly recommend using Nginx Proxy Manager. Can run it on HA as an addon.
Or look at Pangolin (I'm looking at it for the iot stuff at work).