Sounds like something I do for remote support, but I don’t use thin clients. I would generally set up a router and support VPN (Mikrotik device, L2TP/IPSEC tunnel permanently connected for us to connect over whenever) or have some sort of jump box on site, often just a Raspberry Pi would do again with a VPN back to us.