You may want to setup that Internet facing server and configure pam_duo.conf to use it.
https://duo.com/docs/duounix
http_proxy Optional
Use the specified HTTP proxy. If the HTTP proxy requires authentication, include the credentials in the proxy URL. Example format: http_proxy=http://username:password@proxy.example.org:8080