For a reverse proxy I can recommend pangolin. Single sign on, pin password and also private services that you can access via a tail scale betbird like app.