Nord Meshnet, ZeroTier, Cloudflare Tunnels.

Instead of exposing your applications externally, you create a private network that uses UDP hole punching.

This isn't completely self-hosted, as you need some server to auth / broadcast connection details with. Self-hosting might be possible on ZeroTier, but I'm not familiar enough to say for sure.