We've just deployed a Salt-managed, Wireguard-enabled, Zabbix-monitored, VPN-protected, OpenWRT-powered WiFi network for a conference.
It starts tomorrow. Let's see how that goes.
Yes, we will publish our configs at some point soon. Nice of you to ask. :)