I did the homemade version of this for years just with SSH forwarding and nginx reverse proxy
but without nat traversal...
but without nat traversal...