Based on Wireguard, easy setup. Very useful. 

Unfortunately still needs some form of third party identity provider like GitHub or Apple. But not entirely a dealbreaker.