I reach every service on my home server from anywhere without opening a single port

Accessing your self-hosted services from outside your network doesn't mean you have to expose a single port