Bitpost
Bitpost does it all.
HAPROXY
haproxy routes all web traffic to VMs, with the exception of abettertrader which runs directly on bitpost.
2024/04/25 I had an issue on restart, where the automatic "bad countries" scripting was interrupted apparently and left etc/haproxy/blocked_ips.txt poorly terminated. Removed the last partial line, and restarted, and it was happy again.