I also recommend forgejo over gitea. I’m running forgejo and I love it.

For your reverse proxy, look into pangolin. It combines proxy with wireguard tunneling and auth. So you can set up access controls on a service by service level. It’s great. I use it and love it. No affiliation. Just really happy with how it works.