Comment by drnick1

This, but plain Wireguard instead of Tailscale. This assumes you have a public IP. But you can't do true self-hosting without one.