You didn’t explicitly ask for other suggestions but here’s mine anyway; I’m running tailscale on my pfsense router and sharing my home network cidr over tailscale like someone else suggested. So all my dockers and vms are available over tailscale from anywhere. It’s been highly convenient as my home internet connection is behind CGNAT.

I run docker services and host virtual machines from Unraid OS

There is also a snap version of immich, makes all the pain go away… at least, the snap version hasn’t had any breaking updates for me yet. It just keeps working.