Tailscale has app connectors now. You can send all your traffic through certain exit nodes without doing any of this too!