Built a VPN gateway using Wireguard, Docker and a nginx server, restricting the server access to only allow wireguard-client IP addresses by modifying the firefall rules for the docker network.

It was fun, wrote a blog about this.