Will This topology works for traccar with end to end encryption ?

I just got to know about traccar after surfing the web which is great tool and got me excited to start my project to resolve a problem I have .
the only challenge is that my ISP cornering my internet with CG-NAT & with long search I worked on solution but not sure if it works with https/ 443 port . This is the WIP topology if someone would cate to look and share comments .

my main focus are the following :

• Host my activity in local machine instead of VPS to avoid attacks
  -resolve the CG-NAT through VPS and be able to connect even through phone client
• Encrypt all the traffic and avoid noisy parties

Forgot to add that the device used might be one of chineese clones such as this https://manuals.plus/sinotrack/gps-tracker-st-901-manual

Does your device use HTTP-based protocol?

I'm not sure I don’t have a specific device right now , gone through the Chinese ones specifications and all the guides show only how to set the ip .
Do the tracking devices usually don’t support HTTP ?

Usually they don't. They use raw TCP or UDP. I'm not actually aware of any Chinese device that uses HTTP.

So how do we encrypt the client connection to avoid the man in middle.

You can get special SIM cards that don't connect to a public internet, but instead connect directly to your local network via a secure tunnel. That's one option I know about that works for any protocol.