Currently using a patched version of the upstream coredns service, with hard-coded IPs until wireguard exports are supported. Zerotier connections were flaky and wireguard seems more stable (although it seems to have a bit less throughput).
