Wireguard site-to-site, they already had an OK router I recommended to them so not much effort there.