@alex @pearofdoom @Phil_Tanner I run them separately, but for no good reason.
I personally prefer Wireguard-UI or something like that for a WG setup, instead of PiVPN, but either way, it's not too complex, and a Pi4 can easily handle wg/pi-hole/nas on a single device.

@Phil_Tanner @pearofdoom @alex Pretty close to my set-up.
Although I use a Pi4 for it, because a 5 is overkill