If you can selfhost an exit node (and since you’re asking in /c/selfhosted), I wanna shamelessly plugin my solution: github.com/stratself/tswg. Basically mount a WireGuard config from Nord or any upstream VPN, and the container use it to create an exit node on that VPN for you.

There are other gluetun + tailscale solutions that are worth a look too