Struggling to establish the migration tunnel between ns7 and ns8

Yes, regarding the migration it could be seen as server but wireguard is a peer to peer VPN and the peers need to be able to reach each other.

EDIT:

Maybe it helps to just restart the wireguard connections?

NS7:

systemctl restart wg-quick@ns8

NS8:

systemctl restart wg-quick@wg0

See also Migration to NS8 another try - #11 by mrmarkuz