Can I use a globally trusted CA certificate on my proxy/load balancer for external traffic while keeping a self-signed certificate on the backend Tableau Server for internal proxy-to-server communication? Any limitations or best practices?

I want external users to connect via the proxy with a trusted CA certificate (no browser warnings), while simplifying certificate management on internal Tableau Server nodes using self-signed certificates for the proxy-to-server communication.