I wish I had this years ago. To do VNC and get around firewall/NAT issues I actually created port forwarder through Firebase. It surprisingly worked great https://github.com/rb365/fireport

I might try to make it work with Guacamole, web UI is definitely better than installing VNC client.