I just use ipv6. And a simple docker container that updates my dns records. For applications that should not be exposed I use tailscale