Tailscale is your friend. No need to open ports!