Have a look at Headscale to avoid the cost of Tailscale for small home setups.
This, or simply expose a VPN (Wireguard) port on a public IP. I don't see why you need to involve any third parties in such a setup.
Pangolin is also a good choice. Can be fully self-hosted. Also based on WireGuard.
Handles both browser-based reverse proxy access and client-based P2P connections like a VPN.
I believe Tailscale is free to use for small home setups. It's limited to 3 users and 100 devices which has been plenty for my homelab setup.