- Minor
There is a very minor spelling typo in the tooltip in Wireguard "Local server uses NAT:" tooltip. "Addressess" should be "addresses". Again, very minor 
When NAT is enabled, the server uses its own LAN address when forwarding traffic from the tunnel to other devices in the LAN network. Use this setting when no router modifications are desired, but this approach doesn't work with Docker containers using custom IP addressess.
When NAT is disabled, the server uses the WireGuard tunnel address when forwarding traffic. In this case it is required that the default gateway (router) has a static route configured to refer tunnel address back to the server.