Do not recommend port forwarding, as too exposed to hacking.
VPN, or some remote software on a cheap laptop on site.