Syncthing + wireguard solves this. What a waste of time.