Other than for the remote desktop part, Tailscale [1] smooths out a lot of this and has a nice access control scheme. I've been a happy user both at the homelab scale and within bigger orgs.

[1] https://tailscale.com/