Holy moly this is expensive. I'm just running it on a hobbyist/experimentation basis and the Azure AD domain + the Azure Virtual Network Gateway is running over $200 USD/month together! That's around $2500/year, just for authentication with minimal data going back and forth. I'm going to be exploring other routes to make this work.