Network Privacy & Remote Access Stack

AdGuard Home filters ads and trackers at the DNS level for every device on the network, wg-easy gives you a WireGuard VPN with a web UI for road-warrior access back home, and Headscale lets you run a Tailscale-compatible mesh coordination server so devices connect directly wherever they are. Together they cover the two questions every homelab hits early: how do I block junk network-wide, and how do I reach my services securely from outside.