I have this very small homelab with OpnSense as firewall / router and an Unraid server behind it. The Unraid server is mostly used as a NAS but also hosts some docker containers.

Im thinking of setting up a Wireguard VPN. Both OpnSense and Unraid allows to set that up.

Looks to me like the Unraid setup might be easier / cleaner involving docker, but makes more sense to me to install this on the firewall, just a gut feeling…

Any advices? should i setup Wireguard on the OpnSense box or the Unraid box?