a fully open source alternative would be netbird, it's based on wireguard as well, has 0 closed components but lacks some features (like IPv6 or internal CA). https://github.com/netbirdio/netbird