Just an advice but I suggest you host publicly facing services and privately hosted services on different instances. You don't want less tested web app to expo

Just an advice but I suggest you host publicly facing services and privately hosted services on different instances. You don't want less tested web app to expose some security hole for someone to start snooping on your traffic toward BitWarden after SSL termination. If you don't want an extra box at home, you can always get a $5/mo cloud instance for public stuff, where you don't have to worry about increased electricity bill from DDoS having CPU spiked or choking your home network.