The dynamix wireguard plugin for putting the entire system through a vpn. Editing the config files since unraid doesn’t like to play well with ipv6 so changing the allowed addresses 0.0.0.0;;0000:0000:0000:0000 to just 0.0.0.0. Anything else like iptables you’d need to set up manually.
As for containers im using a wireguard vpn within one jackett container since one of the sites that I browse is IP banned on my endpoint. Just dragging the wg0 file to wireguard directory within the appdata folder.
If you’re looking to port forward with wireguard you’ll need to open the port up within the config for your containers and in some cases you’ll need to change the prerouting for some cases like plex. You can find a full reasoning behind it on mullvad’s site.
iptables -t nat -I PREROUTING -p tcp --dport 2233 -j REDIRECT --to 32400
Pass port 2233 into plex set that as your remote access. Thats mainly for plex since it doesn’t normally play well with a vpn