As per usual with any linux tech, the Archlinux wiki has the most comprehensive and incredible section on setting up Wireguard. I got some really nice, really clean configs from this, used pure systemd-networkd to manage the tunnel (and even do routing), and some IPtables sprinkled in.