Have you tried setting source zone to: wgclient like my Plex portforwarding settings here?
I have to add that although this works for me when VPN is active, that it extremely flaky and that I cannot ping my plex server quite a lot of the time regardless.