I opted to use cloudflare tunnels for this, using a cloudflared docker container running on the NAS. SSL is handled automatically through cloudflare, and it's free.