It might make sense to run nginx on a separate server / vps just for better security.