i just run a wireguard on my VPS and set up clients using a handy script that spits out a QR code i can scan with my phone, or for a pc, just c&p the short little file across to it and voila, instant VPN, and not just a VPN but one that routes traffic between my several clients
this is how i run my relay-in-development and test it with regular nostr clients, using a reverse proxy to connect using WG to my machine, it's super simple, cheap VPS, wireguard, and a domain name, and you can do the same thing