Claim a subdomain, drop a token into the LinumIQ frp-tunnel add-on, and expose your Home Assistant securely over HTTPS — no router changes.