Reaching your own LAN without port forwarding, public URLs, or a VPN concentrator
Disclosure: I maintain Lantunnel. It is Apache-2.0 and the source is linked at the end. Every self-hoster hits the same wall. The NAS is at home. The GPU box is at the office. Ollama is on the desktop you walked away from. All of them sit behind NAT, and none of them belong on the public internet.