<b>Private network between your boxes for free</b>

<b>Private network between your boxes for free</b>
Stop exposing MySQL on a public port "just for the app server." WireGuard gives you an encrypted private subnet across providers.
— <code>wg genkey | tee priv | wg pubkey</code>
— each peer gets a <code>10.10.0.x</code> address
— bind MySQL to <code>10.10.0.2</code>, firewall the public NIC
13 lines of config, near-zero overhead, works across Hetzner+Vultr+a home box. Your DB stops appearing in Shodan. This is how the pros do internal traffic on a budget. Try it tonight.