edge (Vultr Tokyo, WireGuard endpoint + reverse proxy)