I’m using nebula to remotely access the raspberry pi in my home network and it mostly just works. The dual setup for nextcloud might be a bit more tricky, at least if you want to use HTTPS. You’ll probably have to set up a reverse proxy in Nginx for at least one of the routes, since they need different certificates (although since Nebula already authenticates and encrypts your traffic, HTTPS is probably not necessary there).
From their terms of service:
I’d guess that most private git repositories are small enough to fall under this category (unless you track large non-text files in git). This also seems like a very reasonable policy, considering that they’re a non-profit and they want to focus on supporting open source projects.