Yes you can and its super easy. Setup your conection through HTTPS block your port only locally, buy a 1$ domain and install cloudflared tunnel. (Cloudflare configures your own TLS.)
You should disable the instance, or try to modify some parameters so you have to connect via some login or password.
Just. Cloudflare reverse túnel to a domain.