I’ll throw in SWAG as another option which I found was easiest to setup, albeit it on a VPN/local only setup. It supports certbot for SSL and pre-defined proxy configs for various services (mostly linuxserver.io containers but there are others) and it’s easy to edit them to make your own configs. I’m not sure about portainer support as I’m not familiar with that.
I’m a big fan of these cooked in an air fryer. Usually a bit cheaper than black beans as well in my area, although I prefer the latter on balance.