I am doing the wireguard approach (although I failed so many times to get local LAN routing to work that i have up and started to use Tailscale...)

But I also does not really have any external users for that reason 😅