I run it through an nginx proxy that runs cloudflared through my domain, giving https access with limited worry of various security concerns. Probably not the best setup but was relatively easy to do.

Not OP, but you could setup a wireguard vpn in your home network.

It would require opening up a port on your router for wireguard. and probably use a dynamic dns provider ( duckdns.org or similar ) to get an url.

Behind Zerotier. Although I’m thinking of just exposing it because honestly if you setup right you kinda don’t have to worry about it that much.