I've written and am running something exactly like this for my work. (We used to use forward.wf but had to move away from it, a third party blocked it). Very s

I've written and am running something exactly like this for my work. (We used to use forward.wf but had to move away from it, a third party blocked it). Very simple system, just a server+ nginx + letsencrypt. Tiny service to set new people up. We've been running out the last year or so, it took an hour or 2 to write, and hasn't needed more than that maintenance since.