Should be able to do this with Wireguard - set on up as a server, and the other as a client to connect to it.