Tailscale.

Don’t punch any holes in your NAT aka port forwarding.

Regarding sharing media with friends and family how far away are they? How much of you upload will be taken? How will you deal with your apartments changing public IP(behind a CGNAT?) and theirs be it on mobile/cellular or even home wifi as described above(CGNAT)?

You might find the only feasible & quality-wise enjoyable solution to be if you and they had storage(NASes). Updates/uploads could “flow” from your end in non-peak(the night) to theirs …

I want to keep proxmox on it and build a vm with all the nic

What your creating is called the forbidden router.

Plex has the “luxury” of auto-configuring my router and somehow mapping its IP so I can “just connect” from everywhere.

Let’s be reasonable. If you’re going to be away from home I’m sure you don’t need all of your content “at a moments notice”.

If you do you wherever you are that’s you’re new home!

In this instance my advice would be to get a small SBC or RasPi + some external storage which you could load up + rotate your content when you travel.

For me I’d add a “travel router” which provides:

• Expansion of number of devices that can access the internet(hotels)
• Minimization of security + privacy configs across devices as it can be setup on one - the router
• Access to SBC/Raspi(and my content) on the LAN

Stop trying to access non-related work things on corporate networks! Use you own travelling router/mobile tethering etc

If you’re abusing this policy also now anything you do/create on “their” computers is/can be visible to them and in the case of creation they can claim IP!