The trick to enabling webservices again after installing a pfsense device is to set up split DNS for the domain you've purchased, directing the URL to whatever IP runs your reverse proxy (i.e., Caddy). Once you've done that, it's just a matter of unblocking ports for specific services (such as the ones for Moonlight).
It's weird to think I've turned myself into a goddamn sysadmin. I just wanted to listen to music on my phone