I did a similar thing with a cheap VPS and Wireguard. I don't trust Tailscale, and prefer controlling all aspects of my VPN. Right now I'm only using a single node, but it would be trivial to start another in a different region, and automate the whole thing.
If someone's interested, this blog was very helpful: https://www.procustodibus.com/tags/wireguard/