@jdaviescoates Typically, I am hoping that this is the kind of situation that the upcoming VPN-per-app feature (that Cloudron @staff mentioned) will solve.
That or the possibility to have a Cloudron proxyAuth in front of a publicly accessible Cloudron app (see here, here and here for example).
Remains to see with what timing this addition is conceivable - but I am hopeful since this is part of @girish's wishlist.
With all this said, I remain troubled by the way changes are brought/handled into/by @stirling-pdf and thus am not recommending it anymore at this stage.