I'm honestly surprised Start9 doesn't have a Dockerised Wireguard package already. Because it's super easy, I've setup Wireguard from scratch multiple times.