Once again, I'll both big-up and ask what's up with Tinc.

As in, I've been using it for years and still do, it's sort of an integral part of my whole deal, but it also seems kind of unmaintained, I haven't checked on that.

And it's not the easiest to set up, but it feels miles ahead of whatever the Wireguard equivalent is or isn't these days.