A VPN that supports port forwarding (there’s some that accept bitcoin) with dynamic dns to update the VPN’s IP when it changes could be one way