A colleague wrote this - https://blog.openziti.io/set-up-a-secure-multiplayer-minecraft-server

zrok.io using the free SaaS together with 0Auth - https://blog.openziti.io/the-zrok-oauth-public-frontend

You could also use zrok.io. It’s an open source alternative which can be self-hosted or has a free SaaS. It also includes cool features like ‘private sharing’ (which means both sides can be private with no inbound ports). I work on the parent project.