@fufroom I use a hybrid setup:
**Tailscale** for my **private** mesh. It connects my phone (Pixel 9 Pro, thanks santa ^w^) to my servers so I can access files or SSH in from anywhere without opening ports. It's magic for NAT traversal.
Consider **Wireguard** if you're more technically inclined, but Tailscale is a great starting point and what I personally use right now.
**Cloudflare Tunnels** for **public** services (like my website). It hides my home IP address from the open internet.