This is what I do and I've wondered why people always shill for tailscale or cloud flare tunneling, seems like way too much extra bs for the same thing
I read that apparently if you don't input a password for root that it apparently installs sudo. I might be wrong about this but could be worth a Google
Personally had a ton of issues with nfs and CIFS mounts in proxmox containers. I ended up mounting on the host and passing the directory through to the container.