Hi Martin,
My recommendation is to not expose the gateway outside the cluster and use another service to just expose the functionality that you need. It really depends on your use case, but you will probably want to wrap the Zeebe interactions in a more domain specific service that will run inside the cluster as well.
HTH