If I want to run a dead simple VPN from a Mac into my house network what should I look at? Router is pfSense, can run any VM needed, don't have a static IP, do have DDNS setup.

@paul pfsense supports openvpn, ipsec and wireguard - https://docs.netgate.com/pfsense/en/latest/vpn/index.html

I've used ipsec and openvpn: ipsec has builtin vpn client in macOS, two others require clients. openvpn for macos is https://www.sparklabs.com/viscosity/ (paid) and wireguard is in the app store. not sure if ipsec will work with floating IP; but openvpn and wireguard works fine with these.

Virtual Private Networks | pfSense Documentation

@paul if you want setup a separate VPN VM, try looking into https://github.com/trailofbits/algo, will setup users, etc for you using wireguard.
GitHub - trailofbits/algo: Set up a personal VPN in the cloud

Set up a personal VPN in the cloud. Contribute to trailofbits/algo development by creating an account on GitHub.

GitHub