I know it sets up the wireguard network but what else do need so external clients can access the services I am publishing like i do with cloudflare zero trust.