This is an ideal use case for something like TailScale! It’ll only redirect traffic that’s meant for your internal network, unless you set it as an exit node - then it asks as a regular VPN.