That’s a… Complicated question haha.
I would be connecting via external url (DuckDns as you said) with a certificate.
However, since my router doesn’t support NAT loopback, I set up a custom DNS server using dnsmasq that resolves the domain I’m using to the local IP.
In short, I put in the external URL, but it actually connects locally.