I also noticed that IPv6 doesn’t NAT right with a single IPv6 on the WireGuard interface. Instead, IPv6 traffic seems to be dropped.