Wireguard is an excellent choice. Much simpler and faster (lower CPU, according to my bench-marks). It's also much better on windows, as it doesn't have to us

Wireguard is an excellent choice. Much simpler and faster (lower CPU, according to my bench-marks). It's also much better on windows, as it doesn't have to use the crufty old tun/tap driver. It's smooth and easy cross-platform, and so much simpler than openvpn.