[lazyeye]

Protectli Vault micro appliance running PFSense with the Wireguard module installed.

Perhaps overkill but have been running this for many years with zero issues. It does everything though so configuration/setup can take a bit of time.