I use NGINX as a reverse proxy it redirects the URL so it hides the /aware/ and because it is NGINX that communicates with AwareIM it also hides the port in the URL and reduces the amount of work when you update AIM
It uses lets encrypt to manage SSL without needing to deal with Tomcat and fiddling about with the keystore
It also allows for the AIM server to be taken down and automatically redirect the user to a message page and reduces ability to attack the AIM server.
You can use one NGINX server to redirect to multiple different AIM or web servers