I'm thinking of setting this up, but I have two questions:
1) How are you handling local access. You wouldn't want to go out to the internet to access your local resources. I already do split DNS, but if your pointing to a port, then I'd have to use a reverse proxy.
2) I have mixed services dependant on SWAG for it's security like pihole, nextcloud, graylog. But some of them have their own IP's that SWAG hook into. Would these services break?
3) Maybe out of scope here, but I want to setup another proxynet that doesn't use the main unraid IP address for this.