Run a proxy in the cloud, then run whatever else you want on prem & expose thru public dns as desired.