Sylve 0.3.0 (pre-release on github) adds a lightweight PF-based firewall + a seriously capable WireGuard manager.Set up a deployment today for a client with multiple VoIP endpoints behind CGNAT (providing them with public IPs), and a tiny FreeBSD box (<1GB RAM, 1 Shared vCPU) is handling all traffic flawlessly. It’s honestly the kind of setup you forget even exists.Before Sylve, we were hand-managing WireGuard configs for setups like this... not something I'm going to miss!