Selfhosted

I recommend it every time this question pops up and I'm surprised more people aren't privy to it:

Rent a VPS as your public gateway. Connect the VPS to your server with a simple wireguard tunnel.

The only thing on the VPS should be a reverse proxy with SSL/TLS pass through.

Send the traffic at the VPS reverse proxy to a reverse proxy on the main server. Configure this proxy to use letsencrypt certs.

The benefit and importance of the SSL pass through reverse proxy, is that it allows all data in transit to remain encrypted until it reaches your physical server. Traditionally, most would suggest the one and only reverse proxy exist on the VPS but all traffic would then be decrypted on the VPS. This could obviously compromise your traffic if the VPS provider snoops or your VPS is compromised.

Cloudflare tunnels decrypt on their hardware as well, which is why I always recommend avoiding their services.

Rent any low cost vps and setup wireguard tunnel or ssh tunnel to it with port forward, done.

Check https://wiki.gardiol.org/ where I detail my setup which is exactly this.

This page https://wiki.gardiol.org/doku.php?id=networking%3Aexternal_access is a good starting point

I use a $2 VPS in Quebec that proxies my home stuff over Tailscale. It uses Caddy and does the TLS encryption and caching. It has the providers DDOS protection, plus I have configured the firewall to have some further protection.

It could also just directly forward TLS packets over any sort of VPN if you didn’t trust the VPS provider or wanted to reduce cpu load.

Look into a VPS + pangolin or headscale Also, check out Crowdsec

Pangolin.

Only complaint is that it uses Traefik instead of Caddy.

Chisel, Rathole, an SSH tunnel with port forwarding, a VPN with port forwarding.
Keywords are "self hosted tunnel" or "reverse proxy over VPN".

Run a VPS for like $5 a month, your local reverse-proxy tunnels out to the VPS, and your VPS forwards port 80/443 over the tunnel to your reverse-proxy.

My ASUS WRT router running Merlin firmware offers to host a WireGuard server, I simply use the WireGuard app, dump the config file in and hit connect.

Took a little configuration but eventually got it working how I want it.

Edit: Reason for the Merlin Firmware is because I can route my VPN server through my VPN provider, goes a little like this;

5G/LTE > WireGuard to my router > Router routes that connection to ProtonVPN

This gives me access to the resources in my home while also reaping the benefits of my VPN provider.

ngrok is a straightforward, powerful, and secure option. Check it out! I run it for my k8s cluster at home.

I run frp but I also like Pangolin