for the record, i tried to do this with AllowedIPs by including all the addresses other than my LAN (10.0.0.0/24), so i tried to do this:
AllowedIPs = 0.0.0.0/5,8.0.0.0/7,10.0.1.0/1,128.0.0.0/1,::/0
in theory that should have included the IP range of 0.0.0.0-9.255.255.255 and 10.0.1.0 to 255.255.255.255, leaving a gap for my LAN, 10.0.0.0 to 10.0.0.255. but i guess there’s something else that has to be done? because that won’t work