Comment by WXLCKNO

It's free, extremely easy (not that port forwarding is complicated) and you don't need to port forward.

I point DNS records on my personal domain to tailscale IPs so it some subdomains can only be accessed when connected to tailscale, I can do app.mydomain.com etc without exposing anything online.