I have kind of wierd requirment, so I have nextcloud instance running on homelab currently not accessible from internet. Recently I have start using nextcloud apps like contact, calander sync using DAVx5, Joplin and some other. I want to keep accessing them when I am outside or traveling but don't want to expose whole instance to public.

There are other services I am exposing to internet using cloudflare tunnel but as per cloudflare tunnel TOS, exposing nextcloud breaks TOS.