Let me sing you a song boys of fire and flame

Come me boys and heave with me, let’s get of this cursed sea

Give me a spade and I’ll give you a hole

You can, that would actually give you security. Not sure how many people do that. I assumed a straight reverse proxy without any auth

Reverse proxy doesn’t really get you much security. If there is an application level issue a reverse proxy will not help