Nice stuff, except most ISPs won't let you open external ports. In this case one can spool a VPS with WG as a server, instead of the raspi, and all other devices connecting as clients. Can be rented for $1.70/month at lnvps.net, no kyc and paid with lightning. But maybe they can't be trusted. Then use Tailscale or a VPS provider you trust.