>>105999475
Adding a static route for both subnets is probably the part I was missing conceptually. Thanks!

>>105999641
>>106000603
Phone WiFi/hotspot clients are routed directly to uplink, so I'd have to root the phone to reroute all traffic through the VPN.

Picrel is probably the perfect solution, and comes with OpenWRT pre-installed for muh freedom.

>>106003368
>I would recommend if at all possible that you install the wireguard client on the device themselves.
I like building small purpose specific devices based like information displays or networked sensors with micro controllers that have WiFi capability, like ESP32. Although people have implemented VPN clients for these platforms, they take up lots of precious flash space and increase power use significantly, and rotating credentials requires either flashing or some secure configuration update mechanism that takes up more space. By carrying a bubble of private network with me just works without increasing complexity for those gadgets.

>Otherwise idk I use openwrt and openvpn
I used OpenVPN
I stopped using OpenVPN a few years ago because the throughput sucked, but maybe things have changed.