Or tailscale to ease things, really easy to setup, only caveat is that devices that will access the server must also be on the tailscale “network”