If you want to expose a container based service just for yourself over internet, you can -

• If you have static IP4 or IPV6 - Setup Wireguard VPN on your homelab/server, and wireguard client on client devices[1].

• If you are behind NAT or CGNAT - either Cloudflared Tunnel[2] or Tailscale[3].

In either scenarios, you need to setup firewall of your server to allow connection from LAN to port of your docker container/services. By default your firewall should block all incoming request.

I’m personally using Cloudflared Tunnel, but planning to migrate to Tailscale.

[1] digitalocean.com/…/how-to-set-up-wireguard-on-ubu…

[2] developers.cloudflare.com/…/connect-networks/

[3] tailscale.com