netbirdio/netbird ? reverse-engineered prompt

I want to build a self-hosted tool that creates a secure overlay network for all my devices, kind of like a personal VPN for my team and servers. It should use WireGuard to connect everything peer-to-peer, so I don't have to deal with opening firewall ports or complex network configurations. The system needs to automatically handle NAT traversal using STUN.

It needs a central management service with a web UI where I can manage the network, add users, and set granular access control policies. For authentication, I want to integrate it with single sign-on (SSO) providers like Google or Okta.

The whole backend should be written in Go and be deployable via Docker, with a simple startup script for a new VM. Also, create client applications that run on Linux, macOS, and Windows to connect devices to the network.