Firewalld

firewall-cmd --permanent --new-zone=wireguard

firewall-cmd --permanent --zone=wireguard --add-interface=wg0

firewall-cmd --permanent --add-port=51820/udp

firewall-cmd --permanent --zone=wireguard --set-target=ACCEPT

firewall-cmd --permanent --add-masquerade

firewall-cmd --permanent --zone=wireguard --add-forward

firewall-cmd --permanent --zone=wireguard --add-service=ssh

firewall-cmd --permanent --zone=wireguard --add-service=http
firewall-cmd --permanent --zone=wireguard --add-service=https

firewall-cmd --permanent --zone=wireguard --set-target=DROP

firewall-cmd --permanent --zone=trusted --add-interface=wg0

firewall-cmd --set-default-zone=drop

firewall-cmd --permanent --zone=trusted --add-interface=lo