Minor nit: wireguard is p2p, so all instances are peers (no client/server), but you clearly have a grasp of the overall concept

Here’s a guide that may help (ignore the multiple node pieces of that doesn’t apply to you):

https://github.com/TrezorHannes/Dual-LND-Wireguard-VPS