Reverse proxy

A web server that sits in front of your actual applications and forwards requests inward — typically terminating TLS, routing by hostname, and adding caching, rate-limiting, or auth in the same hop. In a home server, it's how one public IP and one cert can serve nextcloud.example.com, immich.example.com, and a dozen others without each app having to care about the internet.