Just adding another voice for tailscale. It's an awesome product with a very generous free tier.
I have to run it on my phone all the time effectively routing all mobile traffic through my home VPN which is not ideal for bandwidth and battery life.
I end having to manually turn it off and on.
Instead I wish home assistant had a way to make mobile notification resources easily accessible without VPN - say behind a short lived access token so that I could quickly view the notification media without having to expose local HA install or having VPN always on
You can use an exit node. In that case it will route all your traffic to your home network.