I run Caddy, it has a few services exposed on https, and I also use it with adguard.
Adguard does the DNS rewrite and Caddy does the port map for internal, eg:
Proxmox:
- https://10.0.0.10:8006 becomes
- https://pve.DOMAIN.TLD
I then can have all my VMs/LXCs/Docker with god knows what port numbers pointed to in caddy
I think post above may have that one covered off already