

If the servers have public IPs and you want the minimum possible ports open, just SSH? With passwords disabled and large keys, it’s quite secure.
If that’s still not enough for you or you need a private gateway, then Wireguard. I can strongly recommend Tailscale - It’s really an orchestration layer on top of Wireguard. You can setup your own Derp relays and head scale if you are truly paranoid. But 99.9% you don’t need all that and Tailscale out of the box will work well.
Also Tailscale isn’t a single point of failure the way you’re imagining. It’s certainly possible for Tailscale’s servers to go down, but that won’t drop existing connections.









Say boss does 10 damage per turn. If you heal 8 points per turn, that means boss effectively does 2 damage per turn, and your effective HP is 5x what it would have been without healing. Heal 1 more per turn, for 9 total and your EHP is 10x. Heal 10 per turn and your EHP is infinity. Heal 11 per turn and your EHP is still infinity, no change. So that 10th point of healing was worth waaaay more than the 9th or the 11th.