Or just using a VPN, Wireguard, or Tailscale if you don’t want to configure Wireguard yourself.