Yesterday, 09:17 PM
Yes you can use WireGuard to connect remotely but you need to make the NAS or router reachable from the internet and a few settings fixed. Run WireGuard as a server on the NAS or, better, on your router so the whole LAN is available. Expose the WireGuard UDP port to the internet by forwarding the server port from your router to the NAS or router IP or run the server on a public VPS and point peers at that endpoint. On the client set AllowedIPs to the routes you want to reach and add PersistentKeepalive 25 so the client keeps a NAT mapping alive. If your ISP gives you a public IPv4 address you can use dynamic DNS to avoid dealing with changing IPs. If you have native global IPv6 from your ISP you can skip port forwarding entirely by using the NAS or router IPv6 address as the WireGuard endpoint and allowing the WireGuard port through the IPv6 firewall, which makes remote connections simpler and more reliable. Check firewall rules on the NAS and router, confirm the WireGuard peer public keys and endpoints match, and test from mobile over a cellular network to verify external access. If you want a simpler turnkey option later consider a small cheap VPS as a WireGuard relay or a commercial zero trust mesh, but for now WireGuard plus port forwarding or native IPv6 will get you remote access.