It is strongly recommended that the installable cloud app (more
specifically, the PowerServer Web APIs) should be published to a server
that locates on the same LAN as the database server. If the database is
not on the same network as the PowerServer Web APIs, every request has to
go a long way from PowerServer to the database, it is very likely that
there will be performance and security issues.

Installable cloud apps make HTTP requests to the server to download
the app files and necessary runtime files and make HTTP requests to
PowerServer Web APIs to request services and transfer data. It is required
that you enable TLS 1.2/TLS 1.3 for the file transfer between the client
and the file server, and also enable TLS 1.2/TLS 1.3 for the REST
communications between the client and PowerServer.