Either tailscale the network and not worry about it being "public facing" or if it must be somewhere in the denizens then an outbound only connection between a secure remote server and my server.
Either tailscale the network and not worry about it being "public facing" or if it must be somewhere in the denizens then an outbound only connection between a secure remote server and my server.