Great blog, and this content is very interesting to me. For now, just trying to get my head around a bunch of new concepts (webservers, apex).
You explicitly mention that this architecture relies on Oracle wallet - that sounds secure.
I was looking for more explicit how-do-i and found this apex-behind-a-custom-domain-using-oracle-cloud-and-nginx on DSP site - which makes no mention of wallet but does mention public/private keys.
I feel there is a gap in my knowledge - what am i missing ?
Also for ADB network choice, I assume following are best (most secure, whilst still free): ADB Network Access Type = "Secure access from allowed IPs and VCNs only" ABD Network Access Control List = Enabled
Jim