A pragmatic self-hosting guide to embracing WireGuard meshes, identity, ACLs, tunnels with a deploy checklist..