wireguard
	- assume soa private ip 10.0.0.4
	- assume local private ip 10.0.0.1
	- assume patrick-workstation 10.0.0.2
	- assume patrick-mobile 10.0.0.3
socat
	- assume public IP: 175.22.14.240  
	- assume soaprivate has 80/443 service bind to 10.0.0.4