Nobody mentioned this but route only the necessary traffic to your router (all your self-hosted services) with wireguard's split tunneling (just set the apropriate allowed_ip networks in your wg config).

You could set it to 0.0.0.0/0 and send all her traffic through your router but this could potientially choke your own network and make her own speed slow down.