This is a cool project and I would not shame anyone for using it, but WireGuard is much much simpler than OpenVPN (which was comically hard to get right). If you are considering this because of the possible overhead of doing it yourself I can say it's really not that bad.

Has there been any projects that allow self-service wireguard setup for a group of people?

Update: Actually nevermind, It's been a while since I've searched, and a few are coming up:

https://github.com/ngoduykhanh/wireguard-ui https://github.com/EmbarkStudios/wg-ui

This is great, I’ve been thinking about writing a plug-in for Cockpit[0] that has similar functionally.

[0] https://cockpit-project.org/

I’ve only used wireguard as a client but it’s simply amazing how few resources it consumes. Openvpn when transmitting data would be 10-20% my cpu on a 9th gen i3. I don’t even see a blip with wireguard.

This looks awesome, thanks for sharing!

very useful, I was looking up for something like this. How to make it run kubernetes (k3s) cluster, especially the `sysctls` part.