Wrong approach, before you expose anything to WAN, you want to have it secure.
Have you tried the container approach ?