Yeah, I dont really want to publish anything publicly. Ssh access would be good, but I can do that with VPN tunnel because it would be from my own devices.

But sometimes I need access to my server with gui via other devices, like public computers or somebody elses laptop.

I was thinking to setup a reverse proxy and point it to apache guacamole on the server. Then I can do remote desktop via any browser with 2fa from my phone.