Plain Wireguard would require more work to replicate this feature, but I remembered hearing that Tailscale offers a beta feature to provision certificates, whic

Plain Wireguard would require more work to replicate this feature, but I remembered hearing that Tailscale offers a beta feature to provision certificates, which I still need to try out sometime. https://tailscale.com/kb/1153/enabling-https/ https://tailscale.com/kb/1153/enabling-https/