Yes, if you have it everywhere you want to host services and everywhere you want to access these services, that's great. Realistically, I think it's going to be decades until an IPv6-only service is feasible.

> Otherwise, NAT traversal techniques such as STUN, or hole-punching.

Neither of which Wireguard supports out of the box. To be clear, it absolutely shouldn't – it's a different concern, and the appeal of Wireguard is specifically that it isn't trying to do everything and the kitchen sink.

So, is there an easy-to-use NAT traversal orchestration service for Wireguard out there that isn't Tailscale?

https://github.com/malcolmseyd/natpunch-go

So, before Tailscale there wasn't a solution. Now we have one, but it's yet another tool we have to manually manage.