My setup doesnt matter, I don’t use Unifi for my main home infra.

You can use the Unifi device itself. Teleport is just a single click Wireguard service, with no need for port forwarding or additional configuration.

Last I saw it, you can export the config from the browser for use with client devices, you can use that with wireguard tunnel and set it as always on.