I am working on a solution where we use some CMS and CRM (off the shelf) solutions, but use their API only and have the UI layer exposed to a unified progressive web app (PWA).
However, for time being, we need to allow some users to be able to use the CMS/CRM application directly. The user is supposed to come to the main web app (PWA) and possibly click on a link, or log in and based on the role, they get redirected to the internal web app.
Wanted to understand, if it needs exposing the internal server to the internet?
Servers are Linux VMs