[keycloak-user] Frontend and backend on separate servers

I would like to host backend on secured network, i.e. it would be accessible only from certain IPs. Frontend (Angular application) would be served by different server in public zone, which would have access to the secured network because requests from it's IP would be allowed to go through firewall. Is it possible to achieve this in an easy way? I wouldn't like to implement proxy endpoints for all backend services in secured zone. Many thanks, Nikola