I do something similar with a reverse proxy on a DO droplet (Pomerium so I don’t have to think about certs or SSO) which is on a ZeroTier network along with a box at home. I probably wouldn’t have bothered setting it up if Tunnel had been free at the time, but it’s very convenient to have a random box to do stuff on outside the network (and to be able to access services at home without having to install ZeroTier).