Tips for setting up a small private Discourse behind a firewall?

Thank you for the response. I’m not a network expert so while I have some idea of what you’re saying the details are still unclear to me.

The idea would be to run the Discourse docker on a server behind the firewall. Then I’d need a public-facing domain that redirects incoming browser requests to the server. This would seting up Nginx or something similar to be in the middle there? And I guess that should be some kind of company internal [sub]domain rather than a service like GoDaddy if I want to maximize privacy.

Can I still use the discourse-setup script under these conditions?

The cert is something I can request and manage with certbot and it goes into the Nginx setup?

Then the email server would be… through Microsoft because we use Outlook? I’ll probably have to contact the IT department to see if that is possible.

Overall is this generally the right idea?