The context of this entire discussion is connecting to internal services; the kind you wouldn’t have in your DMZ, as that has no privileged access to your network.
Anyhoo, you do you, but I certainly wouldn’t make public a reverse proxy with access to my internals.
Am I having a stroke or is this hard to read?