You do not have to open any port to reach your synology router form the Wan side. Just enable quickconnect.
![](https://harddrive.dk/wp-content/uploads/2019/03/srm.png)
You don’t have to enable the two firewall rules you see in the picture.
As a benefit you don’t get an certificate error when you reach the firewall through Quickconnect.