https://jramtech.gitlab.io/post/getting-over-cgnat-wireguard-gce/



Good article I've used as guidance. If you want a more hidden/private access to your setup, you could use I2P.