Small gotcha if you are running webConfigurator on port 443 on the lan side and a OpenVPN server on port 443 on the wan side. In the case of a reboot and the wan interface don’t go up (Cable is unplugged). OpenVPN binds to port 443 before webConfigurator, and since OpenVPN cant bind to wan (because its down) it will bind to all interfaces.
Tried to make domain from one PFsense accessible to another PFsense using domain overrides in DNS resolver (unbound). Apparently unbound is miss configured as default so it does not find the route to the other pfsense box.