We've been using Pritunl Zero ( https://zero.pritunl.com/ https://zero.pritunl.com/ ) for this and it's been great - was always difficult to get non-technical u

We've been using Pritunl Zero ( https://zero.pritunl.com/ https://zero.pritunl.com/ ) for this and it's been great - was always difficult to get non-technical users to use the VPN, and now we have authentication even for internal traffic. It seems to work similarly to this but you run it yourself so it doesn't need to tunnel traffic through cloudflare, and it's open source.