A tunnel home

Reaching the household model from outside the house without giving up the loopback-only posture -- a WireGuard front door, an SSH tunnel behind it, and dynamic DNS to survive a sticky IP.