I like zerotier for the small device, self hosting, and no 3rd party sign in aspects. Headscale maybe checks those boxes too, not sure.