Our great sponsors
-
docker-swag
Nginx webserver and reverse proxy with php support and a built-in Certbot (Let's Encrypt) client. It also contains fail2ban for intrusion prevention.
-
InfluxDB
Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
You could avoid port forwarding entirely by running ngrok. Not only can you securely access the machine that ngrok is running on, you can set it up so that certain packets are forwarded to other hosts on the same LAN. (I think this feature may now require a paid version.) Unlike port forwarding, hosts accessible through ngrok are not really exposed to the internet, as you are required to authenticate when you access the "open" end of the tunnel at ngrok.io. Check it out at ngrok.com. I'm not associated with them, just a satisfied customer whose problems with CGNAT were solved by them.