Thanks so much for taking the time to give me this info.

Ah, yeah, sorry. Currently I’m using WireGuard, but I’m open to using something else.

I’ll have a look at Tail/Headscale, this was very informative, thank you very much.

Some users just need to be able to exit my home network.
I would like to, maybe, in the future have a file server/jellyfin, have access to other devices on my network and if I’m somewhere with low enough latency stream games off steam.

Just wanted to say, thanks for asking me for further details. You could have been a dick about my unclear initial post, and I appreciate your just picking away at it until I was a bit more specific about what I was actually asking for.
If this was reddit the whole thing would’ve been a fair bit more hostile.

VPN needs to come in from my domain IP, but exit from my network. What network security best practices should I be implementing?