I have a DigitalOcean server, a paid VPN provider, and multiple personal machines I'd like to be able to communicate with securely over the internet.
In my ideal scenario, I'd have my DigitalOcean server act as a central point to establish internet connections to all my devices. When an authorized device contacted my server, the server would set up the device to send all WAN traffic to my VPN provider (without passing through the server) and create a virtual LAN so my devices can communicate with each other (preferably in a P2P manner without needing to send traffic through the server).
I don't really know where to start researching how this can be done, so I'm looking for suggestions. Any ideas?