We use tailscale for this exact use case and has been working flawlessly so far. You can even set up ACL lists as a firewall.