you can do it even with a secure path using wireguard nowadays, welcome to yesterday