Or the equally simple Subspace [1] if you want to stick with self-hosting Wireguard directly.

[1] - The community fork at least. Upstream is no longer updated: https://github.com/subspacecommunity/subspace