I don’t have pictures but I do have a tutorial in progress. Remote Access: pfSense + HAProxy + LetsEncrypt
As I say in the tutorial, I don’t necessarily recommend this unless you really know how to assess and mitigate the risks of exposing parts of your home network to the internet, even if it is through a reverse proxy.
This all got started because the Nextcloud people are very strict in how they set up their security. Even though my phone is always connected to my LAN over VPN, I can’t use the Nextcloud app unless I set up an HTTPS reverse proxy and I have to use a trusted cert meaning I’d have to add my self signed CA cert to all my devices. So Nextcloud’s strictness is forcing me to go down a less secure route and expose the HTTP/HTTPS ports to the internet. “Isn’t it ironic, don’t ya think?”
Anyway, it took some research and experimentation but I got it to work. 