Someone else already talked about mulvad. But you can use wireguard with gluetun, but the configuration is a little annoying as you need to download the configuration file and grab the key from inside the file.

I use Mullvad with Gluetun, works fine? I am currently using docker compose and container network mode for routing traffic through it

Gluetun works with wireguard configs.

Also, maybe a deal breaker for some is they don't do port forwarding any more (well, for a long time now).