Although wireguard is a crucial part of NS8, there’s no official vpn module. But @mrmarkuz brought wg-easy: