Probably what you're looking for is the following setup:

docker <-> services <-> reverse proxy <-> VPN <-> Internet

1. Your next step is to chose a reverse proxy to handle your requests and serve your services on port 80 and port 443. There are several choice and you have to somehow stick with it, because each reverse proxy has it's up and downsides and learning curve:

• Treafik (that's the one I use and is specifically made for containers)
• Caddy (Never used it but heard only good things about it)
• Nginx (this one is a beast to tame, however I heard it's easier to setup with nginx proxy manager)

Those are the 3 big players I'm aware of.

2. You reverse proxy ready and functional you need something to access them outside your LAN. There are also several ways to achieve the same goal. The one I use and are happy with is to configure Wireguard on your server and only open the port needed to connect to it.

This is also a big part and probably this is the route of a tinkerer and have lot of personal time to spare... There are easier AIO routes that will probably save you time and energy. (Others will point you to the right direction)

3. Bonus tip

You will rapidly understand the necessity of DNS. Reaching out to your services by IP:PORT will annoy you over time, even if you save them as bookmarks. Also if you don't assign a static IP to your containers they will change every time you restart them or reboot your server. Not very practical !!

Here you have 2 choices:

• personal mini certificate authority (totally free and personal local domains but harder to setup)
• cheap domain name with automatic certificate generation.

I personally chose the tinkerer route and learning process. But I have time to spare and while I prefer this route... It's very time consuming and involves a lot of web crawling and books reading.

If you are interested I can recommend you a good ebook on how to setup your own mini-CA :).

Hope it helps, you are halfway through !