would caddy/apache/nginx be the reverse proxy in this diagram or would the NWS exit node have the reverse proxy built into it?
yes, a reverse proxy like that can be the "some service" in this diagram and terminate https and pass over to an http backend. that's what's happening in the demo with the mint. there is still the issue of the SNI which needs to be overwritten by the exit node for backends like caddy to accept them. some reverse proxies seem to be fine with it, others aren't.