Pay somebody to do it. Not a joke - your setup seems like a reasonable match for plenty of PaaS offerings. You'll get way more ROI from working on your product than fiddling with reverse-proxy settings etc.