Nailed it. Long time Tinc user here as well for all my personal stuff. Besides the fact that onboarding individual machines is a garbage process, it's my second

Nailed it. Long time Tinc user here as well for all my personal stuff. Besides the fact that onboarding individual machines is a garbage process, it's my second best "set it and forget it thing" I use; the first being Syncthing which came later (and additionally, the two work very nicely together through weird edge cases like work VPNS and suc.)