HA public access with own cert and own pubic subnet

you can use nginx proxy manager too