This is a quality of life fix. A single boolean controls whether public HTTP(S) traffic reaches your infrastructure.
Haproxy can terminate SSL and forward HTTP requests as a drop-in replacement for nginx. Here is a very minimal configuration file for a single backend. Signed-off-by: mharb <mharb@noreply.localhost>