@Twisty ok, well it's like a vendor did to me for a customer, I finished to put the server on lan with a simple port 443 redirection from the router, like a home server, but we used rule in the firewall to block unwanted country block, I told you there. I wasnt in a position to tell no for the customer, as it was an adhoc customer, but it's a complicated situation to handle, you could ask to make a double form-authentification too in worst case too