@killyourfm I assume droplet is digital ocean slang for virtual machine. I am running Caddy reverse proxy on OPNsense firewall (nginx is too complex for me) which holds IPv4 public IP and does HTTPS and forwards requests to internal HTTP services. However mine are all on different VM, for "easier" maintenance. I could have just used Docker images on a single VM like you are proposing and it would be fine. You can also try LXC containers that can have different IP address.