We doing nginx or Caddy these days? Or a mix? Or something else?
Doing a general entrypoint on OPNsense and maybe another one on the actual VM hosting the services.
I do like that nginx on OPNsense comes with a WAF module, but I hear they're not worth much also.