i would think the docker container is what would have access to the network where the wireguard connection is made would be where i would really have to test from.