Ok, this should be pretty easy then. Just set up an instance in a cloud service provider (Oracle has lots of free stuff for this) and set up wireguard. Establish a VPN connection to your cloud server and port forward from there.
If you do know how to protect that open port then this should be pretty straightforward.
Yes, exactly.