This is the way! Also without having to open a port, you can use dns over tls. Also use duckdns or any other free dynamic dns provider.