Its 2025, Just use Tailscale.
replies(1):
Tailscale is just an added unnecessary external dependency layer (& security attack surface) on top of vanilla Wireguard. And in 2025 it's easier to run vanilla Wireguard than it's ever been.
I know there's plenty of HA integrations that require some cloud service but the core application is very offline-friendly...