I was going to use wireguard, but the setup is always such a pain. Then I realised that Tailscale was Canadian, so I’m happy to use it