I thought Wireguard was the new, preferred, simpler way of running a VPN nowadays. Supposed to be lighter protocol and less complicated to set up wrong than OpenVPN.