Hacker News Reader

Wireguard. Actually I setup also 2nd backup tunnel in case some upgrade or change messes up the first one.

+1 to WireGuard. For people new to it, there are some great scripts which set up and configure it for you like https://github.com/Nyr/wireguard-install