I am by no means an advanced user when it comes to this kind of stuff but just mentioning Tailscale as an option if it fits your use case. It effectively gives you site to site tunneling with the option of zero trust controls, and is extremely simple to configure to work in what I believe is your intended use case.

I’d give it a read through and see if it works for you.