Send real ip to application for fail2ban

The thing is I want it to be public, I already have a way to access a way to access privately, I want a way to access it publicly

You can do that with the personalized frontend idea if you have a cheap VPS somewhere. I'm finding it's a good way to share a TCP port publicly without giving up the backend server's real IP address. It's somewhat less exposure for sure.