addon-tailscale VS addon-wireguard

I did file an issue asking them to make that flag, along with the --advertise-exit-node flag which is also hard-coded, optional.

I appreciate that Tailscale runs the DNS server so it's one less thing for me to manage. Similarly, the built-in LE is just icing on the cake as it's one less thing to think about. Once https://github.com/hassio-addons/addon-tailscale/pull/89 is merged, running Home Assistant on a VPN with a LE certificate, would be such a quick setup for anyone.

Indeed, you can do all that yourself as you point out. Just last night I manually created a public domain to point to a ZeroTier address and ran the Lets Encrypt addon in Home Assistant to generate a certificate via the DNS challenge. Didn't take long, but there were many steps involved (creating a Google Cloud service account and configuring everything).

There is a community-supported HomeAssistant addon which does: https://github.com/hassio-addons/addon-tailscale

I am fairly new to Wireguard and set it up using the add-on from Home Assistant. Git Link

There are three major cloud components. Alexa and Google integrations both have open options that are documented by NC and you are welcome to use them. There’s a lot of setup as you need to deal with a semi-complex config on AWS or GCP which can be challenging if you’re new to those environments, but they work as well as the paid NC option.

The remote access proxy service doesn’t really have an open equivalent but there are tons of other supported solutions out there for secure remote access to your Home Assistant install. One example add-on, developed and supported by an NC employee: https://github.com/hassio-addons/addon-wireguard

In short, the paid cloud services provide an easier path to solutions you can deploy for yourself if you wish. Those services cost NC money to host, so asking for money isn’t too far out there. Of course, that money is more than what the cloud parts cost, and what we all get in return is a team of skilled developers working on the project and releasing everything for free.

I'm running two Raspberry Pi 3 B+ on my network. One is running PiHole (w/ DHCP Server), and the other is running Home Assistant OS with WireGuard (https://github.com/hassio-addons/addon-wireguard).

Home Assistant Wireguard Addon: Interface: wg0 Tunnel Address: 172.27.66.1 Docker IP: 172.30.33.6 Homeassistant Address: 192.168.0.80 Docker added ip route add 192.168.1.0/24 dev wg0 Homeassistant added ip route add 192.168.1.0/24 via 172.30.33.6 Allowed IP: 172.27.66.4/32, 192.168.1.0/24