@icon_of_computational_sin

There's also the duct tape solution of local port forwarding one of the ssh ports from the machine behind NAT to a server. Keep the forward alive with something like autossh.
But @mint 's solution is more elegant.