hello, I am attempting to self-host growthbook on a google kubernetes engine cluster. Is the following correct or am I misunderstanding the architecture: • A single growthbook container runs the frontend and backend on separate ports • I need to expose both of these ports to the internet, because when I access the frontent (defualt port 3000) via my browser, the browser will make calls to the internet URL of the backend, instead of simply communcating with the backend via localhost inside the container (so you basically have two services in one container that communicates via the internet instead of locally) The reason I ask is that I would like to put some serious security stuff in front of the backend so it can only be reached directly from our mobile app, while the frontend would ideally just be exposed behind an auth proxy and then communicate directly with the backend, bypassing the app-security stuff