I think that is the seat based one I see recommended all the time.
I understand that hub and spoke models are inherently questionable security wise and switching to a mesh based approach is probably the answer. But it tends to make for a mess of needing to make sure my various "homelab" servers are aware and so forth.