We doing nginx or Caddy these days? Or a mix? Or something else?

Doing a general entrypoint on OPNsense and maybe another one on the actual VM hosting the services.

I do like that nginx on OPNsense comes with a WAF module, but I hear they're not worth much also.