Any tips for Inventree security online or do I somehow turn off caddy for internal usage?

[nthcomputing]

Hi All,
I'm currently running inventree under Docker in Windows 11 WSL in a Windows Server 2022 Hyper-V guest. I see this whole caddy proxy idea but it only seems to work if you have online exposure. But it seems like that's not a good idea...

What's the recommendation way to either secure the installation for SSL online but keep it secure from random password guesses and stuff?

Also if you don't want any of this, how do you "safely" turn off the caddy component to use just simple HTTP?

I already have a VPN so I don't mind using that. Just wanted to know what I should do. I cannot seem to force Caddy to allocate a self-signed Cert at all as I use an internal DNS system and it seems to not be able to tell the difference to self-allocate.

Thank you for any advice or help anyone can provide on this issue.