I had the same problem as OP. My solution was to port forward to my server but then block connections from all IP addresses accept from my work, which I added to an allowlist.
It’s working well so far, but I think the Cloudflare tunnel is the better option.
thefactremains@lemmy.world 10 months ago
This is the right answer.
The only other solution I can think of would be to put a device in the middle (such as this router).
lemmyvore@feddit.nl 10 months ago
Or you can use the CF Tunnel equivalent from Tailscale, called Funnel.
tailscale.com/blog/reintroducing-serve-funnel