you could try not exposing the ports on the container for wireguard, and then the netmaker nodes would just be non-functional