i'm getting ready to take our new SP2016 farm out to Internet. We currently have 7 servers running WFE, DC, Search, APP, DB, OOS, and WFM. The web front-end will go thru a reverse proxy server.
I'm not too sure which servers will require SSL certificate and external domain in order for them to work properly. I know WFE will definitely require one, but will Office Online Server and Workflow manager require one as well? Or once it goes thru the the reverse proxy server, self-signed certificate will be enough? Same thing for the domain, will the OOS and WFM require an external domain?