be sure to configure wireguard on the devices you sell to users. have their DNS point to your DNS server over WG and have it direct to other useful services in your WG network.