Agreed, CGNAT is pretty much EXIT ONLY; No one [even you] while outside of your ISP/WiFI/LAN will be able to reach your private/hidden IP.
The only ways to overcome that are:
- by using a VPN type tunnel [see @linkp's CF recommendation]
- by using IPv6 [if your ISP provides you with IPv6]
but this path might exclude IPv4 only users