That is an excellent point! I’ve updated the article to include the requirements and the system overview.

I’m using a $5 virtual server on DigitalOcean to host a publicly accesible WireGuard node that serves as a bounce server for the other nodes behind NATs.