oh yeah, you could also use wireguard and host it on a VPS only accessible over wireguard
well, even you could run it on your own home server, if it has a wireguard tunnel to a VPS and you would then be able to access it away from home too