> OPNsense 19.7 supports WireGuard

yep, can confirm :)

currently running on this passively-cooled thing:

https://www.amazon.com/Firewall-Micro-Appliance-Gigabit-AES-...

i should mention, it also acts as a pi-hole via dnsmasq configured with these hosts:

https://github.com/StevenBlack/hosts