Tailscale

Tailscale builds a private network between your devices using WireGuard, so your laptop and phone can reach your MyNode from anywhere as though they were all on the same home network. The word it uses for this is a tailnet, and setting one up takes minutes rather than an afternoon.

The important property is that nothing is exposed to the internet. Devices connect outward and meet each other through Tailscale's coordination service, which means no port forwarding on your router, no ports open to be scanned, and no dynamic DNS to keep current. Only devices you have explicitly added to your tailnet can reach the node at all.

WireGuard provides the encryption, and it is fast enough that the connection feels local. Once your MyNode is on the tailnet you reach its web interface and apps at a stable address that works identically at home, on mobile data, or on hotel wifi — and the traffic is encrypted end to end regardless of how untrustworthy that network is.

It runs as a daemon on your MyNode with clients available for macOS, Windows, Linux, iOS, and Android, so every device you would want to check the node from is covered.

Access can be scoped per device, so you can give someone a way in to one machine without handing over your whole network, and revoke it just as easily later.