I've looked into replacing my personal WireGuard setup with an innernet [0] managed network. You can throw it onto a generic VPS and make managing WireGuard peers super easy.

It's not unlike Tailscale and nebula (that others already mentioned) but I think it deserves to be mentioned.

[0]: https://github.com/tonarino/innernet