It is generally repeated that the Go stdlib webserver is internet-facing-ok and production-ready (with appropriate timeouts being set on the http.Server), making a reverse proxy unnecessary.
There are also dead-simple TLS libraries, some that will even get LE certs automatically.
