Wireguard

My home router (a GL-iNet GL-MT6000) offers built-in WireGuard support. To add a client, you push a button and can either scan a QR code or download the configuration file. The QR code works out-of-the-box with my Wireguard for Android App (the official client for Android), and the configuration file works equally well for Ubuntu Linux 24.04 with Network Manager. To set up the VPN, you simply import the configuration file. The last command is to prevent the VPN from autostarting after a reboot, since when I work from home there is little use in routing my traffic to my own VPN server at home if I am anyway at home.

nmcli connection import type wireguard file Downloads/Lenovo.conf
nmcli connection show
nmcli connection modify Lenovo connection.autoconnect no

It is important to realize that the default setup by this router does not allow you to access the wireguard server on the router from within the network! The easiest solution is to use a DNS name (DynDNS) for the servername instead of an IP address. Then you can edit the hosts file on the GL-MT6000 to specify that the DNS name resolves to the router (in my network that is 198.168.1.1).