Comment by nomius10

An easy solution for the VPN part would be Zerotier / Tailscale. IIRC Zerotier uses chacha20 for encryption which is faster than AES, especially for a power-strapped SBC.