Private Self Hosting Question

I have the discourse installation in a KVM VM with docker, with proxmox VE for virtualization. Access from Internet uses haproxy for ssl termination, that allows to expose only one IP address, even for different services on the Internal network.