You could split the ui and backend code using fast api and sqlalchemy. so you later could change the ui endpoint to point to your nas hosted remote backend (using vpn), but thanks for the i spiration using a tui.

Or you could create a app user on a ssh server and this user starts this app instead of a shell on the server, like [email protected]