Why don't you give Cloudflare tunnels a try? It means you don't have to open ports and you can put Cloudflare's WAF in front of it too.