I’m running a server on my LAN. It’s setup as a Webserver that’s only listening to local connections and a WireGuard VPN server. When I’m not at home, I establish a connection to the vpn.
The webserver is using http only. I’ve set up an nftables rule that masquerades requests from my vpn ip to my webserver in order to access those pages.
WireGuard is left with default settings, so it just establishes a connection between server and client.
Since I’m entering sensitive information on these websites, I’m wondering if the connection is encrypted through the vpn tunnel or if https is necessary to be on the safe side.
My LAN is trustworthy. VPN server and webserver are running on the same machine.