> It doesn't work as a self-hosted service

Sorry but it doesn't work with your current architecture, but it is in fact possible to have the same functionality even within a network/VPN/Tailnet, or with your own domain, like all self-hosted apps do.