Hi
You might want to try Tailscale—it supports custom exit nodes directly in the firmware, so you won’t need to use WireGuard over ZeroTier/Tailscale.
On Brume 3:
On Beryl 7: