You can self host controllers, and apparently "root" servers or moons. But the mobile apps don't support self hosted moons. Therefore, your network will be accessible over the internet.

And I won't be using it. I want local only. WireGuard doesn't do multicast, so it doesn't do everything I want. You can bypass that by using a reflector on your router, to the wireless VLAN. But an intruder will then be able to see everything on your wired network.

Oh well, no printing from my phone for me.

You might be able to get multicast working on a non iPhone, like a Linux laptop, I could setup a gretap then. Can I setup a gretap on iOS? Probably not, thanks Apple. I need a Linux phone. I'll pass, my iPhone should be unlocked soon. Might take 24 hours. I'm not backing up and resetting it until tomorrow. You might have to reset it to unlock it. Then restore the backup.