Check the blog post.

The port forward needs to be done in the wireguard server side and on the router as well.