External network access to internal network services generally has the following ways:

Place the intranet server in the DMZ area so that both the intranet and the external network can access it.

Place a public server in the DMZ area and access it through the reverse proxy.

Use VPN to access intranet for direct access.