

You’re pretty much describing Tailscale with an exit node on the VPS. If the purpose of the VPS is to make their traffic not come from your home, you can omit the VPS entirely as Tailscale only routes through the VPN when reaching services also on the VPN.
Edit: to self host it, look into Headscale, but the default, hosted control server works well too.
Microsoft Edge encountered an error: Microsoft Edge is not the default browser. We reset your default browser to Microsoft Edge to resolve the problem