❯ sudo wg-quick up wg0
[#] ip link add wg0 type wireguard
[#] wg setconf wg0 /dev/fd/63
[#] ip -4 address add 10.13.13.1/32 dev wg0
[#] ip link set mtu 1420 up dev wg0
[#] resolvconf -a wg0 -m 0 -x
[#] wg set wg0 fwmark 51820
[#] ip -4 route add 0.0.0.0/0 dev wg0 table 51820
[#] ip -4 rule add not fwmark 51820 table 51820
[#] ip -4 rule add table main suppress_prefixlength 0
[#] sysctl -q net.ipv4.conf.all.src_valid_mark=1
[#] iptables-restore -n
iptables-restore v1.8.8 (legacy): iptables-restore: unable to initialize table 'raw'

Error occurred at line: 1
Try `iptables-restore -h' or 'iptables-restore --help' for more information.
[#] resolvconf -d wg0 -f
[#] ip -4 rule delete table 51820
[#] ip -4 rule delete table main suppress_prefixlength 0
[#] ip link delete dev wg0

Конфиг Wireguard 
❯ sudo cat /etc/wireguard/wg0.conf
[Interface]
Address = 10.13.13.1/32
DNS = 10.13.13.1
ListenPort = 51820
PrivateKey = 

[Peer]
AllowedIPs = 0.0.0.0/0
Endpoint = конечный сервер:51820
PreSharedKey = 
PublicKey = 

Поменял AllowedIPs на 0.0.0.0/1 что вроде как решает проблему
https://github.com/linuxserver/docker-wireguard/issues/42

❯ sudo wg-quick up wg0
[#] ip link add wg0 type wireguard
[#] wg setconf wg0 /dev/fd/63
[#] ip -4 address add 10.13.13.1/32 dev wg0
[#] ip link set mtu 1420 up dev wg0
[#] resolvconf -a wg0 -m 0 -x
[#] ip -4 route add 0.0.0.0/1 dev wg0


Подключение вижу, но трафик не идет почти.

❯ sudo wg show wg0
interface: wg0
  public key: 
  private key: (hidden)
  listening port: 51820

peer:
  preshared key: (hidden)
  endpoint: 109.107.173.206:51820
  allowed ips: 0.0.0.0/1
  transfer: 0 B received, 1.45 KiB sent

❯ sudo iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:51820
ACCEPT     udp  --  anywhere             anywhere             udp dpt:51820

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         
ACCEPT     all  --  anywhere             anywhere            
ACCEPT     all  --  anywhere             anywhere            

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination