Alfenstein

I have it set up so that my custom domain is pointing to the local ip of my server.

I use wg-easy, which is a web ui bundled with wireguard and it works great. I only have to port forward a single wireguard port on my router.

May be gdscript

Late reply, but tailscale is really easy to use and is secure for experimentation.