This is of course possible. The prerequisite for this is in the simplest case the use of a static IP or a host name and a corresponding port forwarding to the internal workflow server on port 8081.
From the network point of view, configurations as follows are possible. The external port number can be arbitrary apart from the frequently used standard ports. Some examples:
workflow.domain.com:8081 → 127.x.x.x:8081
workflow.domain.com:52211 → 127.x.x.x:8081
11.47.87.112:8081 → 127.x.x.x:8081
For security reasons, we recommend that you allow dedicated access from the outside using whitelisting. This means that access to Workflow is blocked by default, the source addresses of Smart Shop or LiftERP are whitelisted individually.
In case of a connection e.g. of an online store to Workflow, it must also be guaranteed that Workflow itself has access to the sources to pull print data from the web/file server (http/https/smb).
The IT service provider is also free to use other methods for securing, e.g. a reverse proxy. Basically, it is only necessary to ensure that Workflow can be reached at destination port 8081.