I use Wireguard from the Pi to the VPS. It was really simple to setup.