@splitshockvirus add in iBGP for your local network and you'll feel like a real wizard

If I really wanted to I could have it run on a second VM/jail and use exabgp to detect when it becomes primary and automate enabling/disabling the Wireguard tunnel that way. Then you'll have redundancy/failover too!