

I would strongly suggest Pangolin for that use case. It combines a reverse proxy with a VPN tunnel between your local network and your VPS. You can host your services on your local machine, and serve them from the VPS. Pangolin also sets up your letsencrypt certs for https.
It also provides a security layer: if enabled for a site, you have to be logged in to Pangolin before Pangolin will proxy traffic to your site.










This only applies to routers.
It’s not widely known outside the ham radio community, but part of the 2.4GHz wifi band overlaps the 13cm amateur radio band. If you turn off 5GHz wifi and lock the 2.4GHz AP to Channel 1, it qualifies as a ham radio, and can be sold as a ham radio instead of an AP/Router. You do need a ham radio license to operate it as a Ham AP, but you do not need a license to buy a Ham AP.
If the end user wants to turn on 5GHz after the fact, there is not a damn thing the FCC can do about it.