I self host vault-warden on my home network, but it is not publicly accessible. Like all my services I self host, I keep them internal only, then use wireguard

I self host vault-warden on my home network, but it is not publicly accessible. Like all my services I self host, I keep them internal only, then use wireguard to have an always on vpn back to my home network. This way, I only have to focus on making sure my vpn is secured.