I have 2 uses for the concept of a VPN, but im having a hard time understanding the overlap and implementing them both.

Current Setup:

• Synology NAS running docker
• Docker container with OpenVPN/Transmission
• CyberGhost VPN Subscription - Connected in OpenVPN and working as intended by only routing traffic to/from the Transmission container through the VPN.
• Multiple other Docker containers (Unifi Controller, Sonarr, Radarr, HomeAssistant's Hass.io). I can connect to these containers on my LAN using the NAS's LAN IP and their respective ports. Router: UniFi USG

My goals:

• Use a VPN to remain anonymous, but only when downloading files using Transmission. (Set up and working as detailed above)
• Connect to my NAS from outside my network so I can connect to these individual containers to manage those applications. I have heard that this is safer than opening individual ports through my router directly to those containers. Note: I don't really need to directly connect to the Transmission container that is on CyberGhost since downloads get started automatically from Sonarr or Radarr.

My Questions:

1. What do I need to do to get my second goal to work?
2. Is there any overlap between my CyberGhost VPN and the VPN functionality that I am looking for? or are these 2 uses completely separate?

Thanks ahead of time for your guidance and advice!