[HECnet] How to set up a HECnet connection

So Mark (Matlock) has been after me to get my HECnet connection up and running and me, being an ace procrastinator, has always said "Real Soon Now™", Mark. I might actually have time to do it as I'm on vacation for a week and a half.  Despite the heat I could set something up.  My question is how do I set it up.  I have a Mac Mini in Las Vegas running VMWare ESXi.  I have a VM (Aniketos) running Vyos for a firewall/router, another VM with an Nginx web server (Hermes - irrelevant just mentioned for completeness) and a really small (1 vCPU) Linux VM (Knight) which I want to run Paul's PyDECnet router for the world to connect to.  From there I have an IPSec VPN to my Ubiquiti EdgeRouter 4 at home.  How can I connect DECnet through the VPN to Knight from home?  Is it even possible?  Do I need or want GRE tunnels through the VPN? Am I just making it too complicated and should I set up a PyDECnet router at home and go that way through my dynamic IP? It's possible I could set up an x86 OpenVMS machine as another VM I'm thinking I need a PyDECnet router at home to collect all the DECnet traffic and shove it through the VPN to the PyDECnet router at the remote site and from there out into the internet to it's HECnet connection points.  Does that make sense? I tried drawing an ASCII picture but apparently I suck at that. Hopefully the description makes sense. Hoping to get people's thoughts and if you're experienced in designing PyDECnet config files, any pointers are welcome. -- John H. Reinhardt