I wrote something similar to be able to run vscode against any remote machine. This was before vscode's own tunnels.

https://github.com/efrecon/sshd-cloudflared

It automatically runs a dockerised sshd to access your directory. The sshd is configured using your github's keys to protect access.