pull down to refresh

You should run umask 077 before creating your wireguard private key else it may be readable by other users.
Or change permissions with chmod 600.
You shouldn't assume directory permissions are properly setup which may be the assumption in this guide.
But maybe I am just overly critical since I am working on my own WireGuard + iptables guide, lol