Hi Team, For Typesense setup in Production what would be a option/best practice if the customer does not want the 8108 directly exposed to incoming public-facing internet traffic?

Move it behind nginx. There are many guides about running services behind nginx. We don't have docs for that though because typesense is already using a production ready http server so you can directly expose it on port 443 (https) but I do get your customer's concern.

Thanks, this is useful input. We are running apache in that server, so i guess we can implement reverse proxy using apache.

Yes that works as well