I'm using tailscale for this and am finding it great. I have an Unraid home server/NAS, which has quite nice tailscale integration. The server can be used as an exit node, and each containerized application/workload can be configured to use tailscale and get a nice (https) address that works in your tailnet. I'm not close to hitting the free tier limits, though I'd be happy to pay for it (and I do pay for mullvad through them)