Removing Hetzner's private networking from the #tootcommunity infrastructure definitely cost me a few years of my life. It's now running on a public WireGuard mesh. No more vSwitch shenanigans!