[aborsy]

VPN traffic is decrypted at VPS. TLS encryption may also be terminated by the reverse proxy.

A mesh VPN will give you point to point tunnel. Even http will be secure.