If you want total control over key material then you might prefer to stay with vanilla WireGuard or self-host Headscale. But ...

Running Pi-hole alongside services like Nextcloud or Jellyfin sounds easy to manage, easy to back up, and perfectly ...