I can't recommend the official (or community) cli. Best would be to use wireguard or openvpn. In a docker setup, try gluetun