a proxy gateway with optional http awareness! just a handy map over haproxy and nginx.
by convention, we manage service bindings using SRV records so that the edge configuration doesn't have to be rebuilt when the bindings change. this adds a little extra accounting, but if you manage all your services with minibase the modules with create all of the entries for you or at least setup the configs to request bindings from upstream. the nice thing about this pattern is that it composes well with shared resources.
wireguard over yggdrasil with defined exits.