@careful-pencil-2826 @abundant-jackal-54634 I went with reverse SSH tunnel to a cloud VM and Caddy for reverse-proxy. Wrote about it here:
https://gist.io/@nileshtrivedi/4c615e8d3c1bf053b0d31176b9e69e42
Will need to figure out TCP proxying (WIP in Caddy itself), IPv6 support, and auto-mapping of ports within a range.