Quickstart and load balancing

When using Gravity with the Mattermost quickstart project on a bare metal server, what would be the recommended way to expose Mattermost on port 80/443?

I’m working on setting up an nginx ingress controller, but it’s getting hairy with the pod security policies. If this is the most sensible approach, are there any examples for getting something like this working with the built-in PSPs?