Like many of you, I have a variety of services that are hosted inside my home that are completely internal. I also have a slew of VPS servers. I've been looking into Tailscale/Headscale, but probably don't need to go that route just to access my NAS outside of my home.

I am extremely conscious about security/privacy, so at this current moment, I don't access anything inside my home externally, and have no VPN's set up. If I wanted to run a service that I needed to access from the outside world, I would always just run that on a VPS.

I'm running a full stack of Ubiquiti gear, (UDMP, etc). In the past year or so, Unifi has added the ability to create a Wireguard server on the UDM Pro itself. I am thinking this might be the safest way to access my Synology from the outside world if I am traveling. I also could host it on a few Pi's that I have sitting around, but I think that just adds unnecessary complexity with security. Running the WG server directly on the firewall gives me more granular control through Firewalling, etc.

I've also toyed with the idea of running a WG server on a VPS server and using that kind of as a "jump" server, but not sure what the advantages/disadvantages would be over just running the WG server on my UDMP.

Anyone have any input? Especially those of you that also run a Ubiquiti stack.

Cheers.