Postgres also has TLS + oauth2 support
> rather that actual "vpn overlay", I use Tailscale myself
I actually already had tailscale in mind when talking about "vpn overlays" :D