@r000t @p @NEETzsche @graf Setting up certs and additional firewall rules sounds more complex to me than just slapping WG, binding nginx to a port inside the tunnel and calling it a day. Probably has less overhead, too, since it doesn't need to verify the certificate for each connection.