We don't have any documentation on it, you would follow the documentation provided with whatever product you choose to use.  There is no change to the Web Access configuration required to support this.

There really aren't any additional security concerns here beyond the usual ones about making a server accessible to the internet at large (installing updates, locking down access, removing unneeded services, etc).