Open services to friends/family

Hello!! I'm searching a bit of advice and direction regarding my homelab. I currently have a Mac Mini hosting Navidrome + NextCloud over TailScale with a caddy reverse proxy. (I'm also hosting an AI related project that I built myself but that's not the point of the post, nor I want to promote it). I want to move from using TailScale for various reasons (some more stupid than others, but hey, I'm having fun). The issue is my ISP doesn't let me open my ports and I don't really want to change providers (they offer a really good price for fiber). As previous steps to keep my stuff protected I'm doing some tests with Navidrome to see how to move things forward. My idea was to host Authelia and hide my services behind it but I usually use Navidrome through clients like Amperfy which don't really know how to work with it, so I did what every insane person would do and created a small app client that handles Authelia as an SSO service as well this way I can not only have my services protected but also give access to specific services to the users. Right now it works fine but the next step is, of course, to actually expose all of this. I thought of getting a VPS and use it to expose the services but I'm not really sure what is the best path here. Or if I'm taking necessary precautions. Also, if I end up doing the same (self made client) for NextCloud, I'll probably substitute it. Is there any sort of OpenSource service for file syncing and browser file editor all of it with the multi user capability? I'm fine with hosting multiple different things if they can work together. TLDR: I cannot open ports on my router because ISP sucks, how can I expose services to the internet? Is using Authelia enough to keep my server protected? Is there any NextCloud alternative for file syncing and browser file editor all of it with the multi user capability? Note: I'm a soft. Eng. so I am okey with building stuff myself. Also if anyone is interested in the projects I mention or want to know about stuff I have in mind, feel free to ask :) And I plan to eventually open sourcing all of what I build once I feel is ready. Thanks in advance for reading this wall of text :) Edit 1: I would like to avoid cloudflare because I eventually plan to host Jellyfin and I believe that is against their Terms and Conditions