signed-

I would just use Tailscale, especially with the builtin quality of life features (Airdrop-like, SSH MFA...)