set up wireguard at your home network and connect to it from the outside. you need a single port open for it