Well I don't really want my home IP anything to do with my websites (don't want to deal with dynamic IP or whatever) so I just route traffic to a GCP instance (pretty small one) that routes to the internet (meaning cloudflare).

GCP instance is like the main Wireguard peer and I can easily add my laptop to the VPN so I can remotely ssh into my server.