I really like my #wireguard setup. I'm moving more and more services behind it and don't expose them anymore. In addition I've setup #pihole again and move as much as possible from my #pfsense firewall to my #nixos server. It just feels better to have things set up declaratively instead of relying on backups.