foo.my-domain.com is ready, WireGuard comes next