host-add-static-route
Adds a static route to a host that may be on the other side of a
Wireguard tunnel. If a static route is not created, Wireguard may
attempt to connect to the host running Wireguard over the Wireguard
tunnel itself instead of across the Internet. Adding a static route
to the Wireguard host on tunnel creation prevents this situation.

unbound-host-add-local
Adds a local-data section to Unbound for the Wireguard host just in
case Unbound is connecting to a DNS server for a domain that is on
the other side of the tunnel. e.g. wg.natrinicle.com should be
retrieved from external DNS servers while all other natrinicle.com
subdomains should come from 192.168.0.1 which is only available after
the tunnel is up.