I'd just stick the server into a docker container, and firewall it from the public Internet. NodeJS is not something that I'd use for these kinds of tools, but

I'd just stick the server into a docker container, and firewall it from the public Internet. NodeJS is not something that I'd use for these kinds of tools, but it's not inherently bad.