You might wanna look into Tailscale for connecting to services like Immich while outside your network. It’s incredibly painless to setup and has replaced all other VPN solutions for me (especially with their Mullvad integration).