I use the tailscale services feature for this, added benefit is I get https.