I have so far been able to access and post on everyone else’s instance from my own. I do struggle with searching but I’ve considered that to be due to the large amount of people. Example was when beehaw crashed the other day.
So far, it’s been simple enough.
Yo - absolutely!
WG easy posts the GUI on a separate port than the primary Wireguard port you’d need to open in the firewall. I think it’s 51821 - but this can easily be changed depending on if you’re using docker-compose files or a gui like portainer to manage this.
In my case - I am using Nginx Proxy Manager - and it even has it’s own basic password requirement “Access List” availability. With NPM I’m routing that gui over vpn (local dns) but you could put it behind a password with limite security via Access List, or the step beyond look into “middleware” like Keycloak.