As other's have already mentioned, currently I am using Tailscale. But I plan to somewhere in the future change that to something a bit more controlled by myself. Like a self hosted Wireguard VPN on some VPS.

I was also thinking about just reverse proxying my local instance to some public domain. But currently do not trust immich to be safe enough to allow for public exposure.