i've had wireguard configured on most of these before, and i think maybe i changed some of the default resolvectl stuff on the hosts that aren't working