Zerotier One (https://www.zerotier.com/) is my favorite VPN. It’s also helpful to manage a fleet of Nerves devices, so I wrote a basic wrapper that starts the zerotier-one daemon and provides some API items.
P.S. name suggestions would be handy. It’s could run on a regular linux system as well