Multi-tier virtual homelab: what I built and what I'd change

I built a segmented network lab on a single laptop which has few Linux containers, a hand-configured router doing firewall, DNS, DHCP and VPN, and WireGuard as the only way in. This post covers the ch