With a simple WireGuard interface on OPNsense, I can make sure certain devices always use a VPN
You can use OPNsense to force all your devices to use a VPN if you want.
Some devices don't need to be connected to the internet with your home IP address publicly visible, and if you use OPNsense, it's actually very easy to automatically route designated traffic over a VPN while still allowing local access. I've been playing around with it, and all you need is a VPN that supports WireGuard and the configuration details required to connect to the provider using a regular WireGuard client.
