Comment by gonzalohm

Or just use wireguard directly. I get it that it's a pain in the ass to configure it, but there are plenty of open source config generators