VPN allows access just like you were on your LAN, and is the most secure method when configured correctly. Unraid includes wireguard by default, but my personal preference is a VPN server on my router, that way I have access even when Unraid isn't available. I can VPN in and manage my server with IPMI just like I was sitting in front of the screen, do updates, reboot, troubleshoot, whatever is needed.
For apps with a webgui, nginx reverse proxy with letsencrypt certificate (swag or npm in the appstore) is another way, it doesn't require special configuration on the client like VPN does.
If you have a static IP for your home internet (not common) you probably would want to buy a custom domain for the price of a few beers for the entire year, or if you have a dynamic IP you need a service to update a domain name whenever your IP changes, many options there as well.
All this assumes you have a public IP that accepts incoming connections. If you don't, because your ISP blocks popular ports or uses CGNAT, things get way more complicated.
There is no one simple answer. Hopefully my response gives you some search terms to start your education journey.