I wanted the convenience of Microsoft 365 with software I could control. I finally found it.
No VPN or exposing ports necessary.