- netbird
- tailscale
- straight up wireguard??
- long-lived ssh reverse proxy