Comment by p0w3n3d

Wireguard is the best (I find its great performance an order of magnitude better than tunelling via ssh for example).

I know stunnel serves different purpose, but still why would you need it for your service if you can be in the vpn and speak plaintext?