just my 2 cents: if you wanna keep it simple, try setting up a VPN on a dedicated device instead of the router or app. it keeps things kinda separate and easier to troubleshoot when stuff goes sideways lol. ever tried a mini PC or a Raspberry Pi for this?
