The other half of the any-port tunnel: keep your coding agents alive on the box as a headless fleet, re-attach to them as a thin client from anywhere, give the fleet a standing roster of seats, and lock the SSH transport to post-quantum key exchange so ‘anywhere’ is a plane, not a LAN.
Move your coding agents, dev servers and builds to a spare LAN box or a VPS, then open every port they listen on right in your browser. One SSH SOCKS5 tunnel, remote DNS, a PAC rule, and a one-way drop folder to hand the box files back. Nothing to set up per project.