You can modify the binding on the docker-compose to be against one of the private interfaces created by wireguard for the server. In a future version we’ll do this automatically but that’s the way to do it in the interim