i tried it without network_mode: host, but ofc the fact that both need the same wireguarde listening port just completely breaks it