I mistyped that. It was tailscale not wireguard. Tailscale changes your dns lookups, adds a bunch of iptables, and then unfortunately broke features without a

I mistyped that. It was tailscale not wireguard. Tailscale changes your dns lookups, adds a bunch of iptables, and then unfortunately broke features without adding them to the changelog (because security I guess). While wireguard has more of a maintenance overhead tracking public and private keys and ip addresses, it does less magic -- and I really just want things to work these days.