DeSEC + Opnsense Router + Home Assistant Encrypted Remote Access

Can anyone advise me the best way to securely (remotely) access Home Assistant using a DeSEC dynDNS via an Opnsense router?

Any advice or tutorials would be cool if poss.

Thanks.