Yep. That’s the number one contender. Well right after overriding default DERP’s with my own VPS machines. I’ll definitely try it out over some weekend.
One of my other concerns with this and other solutions suggested is the reliance on wireguard which can be subject to fingerprinting and censorship. Do you happen to know if it’d be possible to swap out Headscale’s implementation of wireguard to amnezia? I’ll have to do my homework anyway, but who knows, maybe there are some pitfalls to avoid.
Nope, haven’t actually read the comments, just sent the article as reference to the issue. It does indeed sound quite promising. Think it’d be nice to have even if as just a fallback, so I’ll try that too, whenever I get a moment.