Hey HA Peeps 
I am looking at replacing my DuckDNS solution to access HA remotely with WireGuard. There is an easy way to integrate this VPN service using an addon, but I’m wondering if there are any benefits to setting up WireGuard in a separate VM/container ( containers are new to me and normally I would go for VMs ), considering I have a Proxmox server, where Hassio ( hopefully I’m calling it by it’s right name ) is installed, and where I can boot up more VMs. I would like to integrate AdGuard eventually too, or something that can filter ads out from my internet traffic.
This is my first time setting up a VPN, and I don’t know much about it, but I’m not looking for the easiest solution, I don’t mind tinkering. I am after best practices, best performance, and most future proof.