This is great if you have zero trust and want to build everything yourself, but anyone looking for a more turn-key solution should take note of Tailscale. They do the plumbing for you and you can have all your devices in a mesh VPN (uses WireGuard under the hood).