Hacker News Reader

There are several Wireguard managers, but this isn't an issue with the transport protocol. It's an issue much higher in the stack, and one that requires that planets align in precise ways.

Things usually are not broken by breaking encryption. Things are usually broken via bugs in higher-level logic somewhere else. Wireguard is fine, but if the thing deploying and managing and configuring Wireguard happened to be vulnerable then it doesn't matter.

This is why you want defense in depth. Don't trust just one layer of security, ever.

Slack's Nebula: https://github.com/slackhq/nebula

Does Nebula use Wireguard? I briefly looked at the readme, but did not see it mentioned.

Tailscale perhaps?

Self-hosting is possible by adding headscale too: https://github.com/juanfont/headscale

It doesn't have all the features of tailscale hosted server, but they seem to be actively working the list of missing features.

AFAIK Tailscale is an alternative to ZeroTier, but it doesn't involve WireGuard.

Edit: I was wrong.

Tailscale uses WireGuard under the hood.