Jeff Geerling walks through PiVPN with WireGuard, including DNS, port forwarding, and phone setup with a QR code. Clear and honest about security responsibilities. Requires a public IP or workaround; CGNAT users will need Tailscale instead. Resource: Build your own WireGuard VPN with PiVPN — https://www.jeffgeerling.com/blog/2023/build-your-own-private-wireguard-vpn-pivpn/ (Jeff Geerling) WireGuard or OpenVPN for a home server, and why?