how

When I ran a home node, I ran:

Public node (colo'd) --wg--> Private node (home) --intranet--> wallet

Now that I don't have a fixed home, I run:

Public node (colo'd) --wg--> Private node (colo'd) --wg--> wallet

Besides wireguard, LUKS is your friend. Also for your home hardware.