Just installed tailscale and removed my custom wireguard installation, thank you!
The android app is a bit rough though
I gave up on everything but my backups and a few syncs. You need both hardware security and software security to selfhost. And that requires maintenance.