You can basically do this yourself without punching holes out to the public. Create VPN for Pi and clients and access from the same private network.