I have a domain name on cloudflare DNS, Let’s Encrypt certificates that auto renew and an Nginx reverse proxy pointing at the services I host. Port forwarding through the opnsense router for https.

It’s been a journey setting it up, but its basically been unchanged for about 5 years now and works well. If I need to I can VPN in too.