Publish the meeting web app behind a reverse proxy and expose the media bridge's UDP ports separately, adding authenticated TURN for blocked networks. Guests join by browser link while your LAN stays hidden.