Author here - great questions and I totally agree on the podcast back catalog not being easily searchable. This is an attempt to fix that in some small part.
1. I'll be taking a break for a few days as I'm totally cooked getting to this point with writing for a while, but the WireGuard pages will cover this eventually. To answer the question quickly though, a local DNS server would do the trick - opnsense has unbound built-in or there's something like PiHole or Adguard Home that could fill the gap too.
2. It depends! And there isn't a right or wrong answer for this. With virtualisation I've found that one big box to do everything has been really very stable indeed.
1. I'll be taking a break for a few days as I'm totally cooked getting to this point with writing for a while, but the WireGuard pages will cover this eventually. To answer the question quickly though, a local DNS server would do the trick - opnsense has unbound built-in or there's something like PiHole or Adguard Home that could fill the gap too.
2. It depends! And there isn't a right or wrong answer for this. With virtualisation I've found that one big box to do everything has been really very stable indeed.