Ok but sorry if I'm dumb, but by adding your WAN IP in your Local Only access list, doesn't that make it "not local only" anymore? Since anyone can appear as your WAN IP? Oh unless you mean that those ports aren't forwarded or something? But no they all arrive "via the same port" to connect to your reverse proxy no?  
Thanks

Just trying to learn haha