I believe bitpay.com is the way to go. Easy and tested a lot already.

1 million is not as a great number as it looks like.
Any bip39 seed can generate billions of addresses.

I believe that an xpub file can be transferred to the server and generate billions of public addresses without exposing any private keys.