I haven’t gotten around to setting it up myself yet, but I have immich-public-proxy pinned. Could solve exactly your problem. Keep your main immich behind your vpn but expose some public galleries of your choosing.

Hadn’t heard of this before but just been playing around with it and it’s actually pretty polished

Agree, Mlem is also quite good but the Memmy dev is killing it with the daily updates