If you create an outbound tunnel, your options are whatever you want. nat and cgnat only affect inbound routing.

check into tailscale or cloudflare tunnels/argo