if you had a wireguard VPN with a reverse proxy it could be reachable from the outside, i run mine like that most of the time while testing it, simplifies the use of clients because most of them don't comprehend port numbers