I did a wireguard on a router level, it was easier to setup with my router so it now gives me access to the entire network and I can ssh or enter Thunderhub on my phone from anywhere.
worth the effort imo.