Optimize and secure NGINX server of Shopware 5 shop, reverse proxy and Cloudflare settings

We are searching for someone with solid knowledge in web hosting, Linux servers/NGINX and Cloudflare to secure and optimize/configure the servers/setup of our Shopware 5 shop. The setup of the shop consists of a dedicated backend server (Ubuntu 18.04, NGINX, Shopware 5.7, PHP 7.4), a reverse proxy VPS (Ubuntu 20.04, NGINX) and Cloudflare. We don't think knowledge in Shopware will be an absolute necessity, but as Shopware is based on Symfony (Version 4.4) it would be helpful if you have experience in working with/hosting Symfony-based CMS, for example Drupal, Joomla, Contao, Prestashop. Our shop contains about 5 000 products with about 25 000 images (already added to the backend server). At first, there is a problem to be solved: we did the basic installation and setup of the backend server and the reverse proxy and pointed the domain to the reverse proxy, but it only shows the NGINX default page. We could not figure out the reason for this, so this has to be solved by you first.. We created a 3-page PDF file in which we describe exactly what we have done so far so you can get a quick overview about the current status (the document is also attached to this project, feel free to have a look at it). After this is done, we will connect our Cloudflare account to the domain and the main work can be done. We are far from being hosting experts, so we are always open for and will rely on your suggestions and consultations. The most important points are: Create DDoS protection using the servers and Cloudflare and set access rules/GeoBlock to the site, access should only be possible from residential Ips from some countries we will give, all the other countries should be blocked. The blocking of bots, scanners, crawlers etc should be quite strict, but the site needs to be found by Google and Bing search bots for our marketing campaigns. We are open for your suggestions on how this can be done and what services should be used (Cloudflare Pro/Enterprise, [login to view URL], [login to view URL] or similar). Optimize Cloudflare settings for security and speed. Set up firewall settings and port protection. Prevent the backend IP from leaking. The site should only be accessed through the reverse proxy. Install FTP server/create FTP user on backend server with rights to read, write, upload and download to shopware root directory (/var/www/shopware/) so that changes to the Shopware theme can be done by us. Ideally, do some basic speed optimizations of the servers which fit the needs of Shopware 5. Write a short summary/“guide“ (including the solution to the initial problem with reverse proxy only showing NGINX default site) about what you changed and where (in which files) you changed it and which settings you made. This doesn't need to be very extensive, short key points added to the configurations similar to page 2 of our PDF file would be sufficient. With the help of this document, we just want to be able to reproduce the setup you created on other servers ourselves for testing and learning purposes and do further research on the topic (we are very interested in the topic and in improving our hosting skills). A simple txt, doc or PDF document would be sufficient. If you are interested in this project we are looking forward to your message!