wireguard as primary, Tailscale as backup.

if I have something I don't mind Cloudflare and the government taking a look, then Cloudflare tunnel.