Can be done keeping the HA port closed in the router, with a reverse proxy? Nginx or traefik? What is better for that?
Technically they all the same. Proxy just allows multiple services at single port but all cases HA is exposed if only indirectly
I think HA cloud does not expose port and easily enables google assistant