My Wireguard setup - Critique & advice

Afternoon all,

I setup the built-in unRaid Wireguard a few weeks ago and it's been working great, I'm able to remotely connect via my phone, watch Emby, print etc, no issues at all.

Looking within Wireguard, it gives various remarks, which I have actioned in relation to "port forwarding" and static route", however I'm a little unsure as to the last remark; "ensure the peer network is different from 192.168.1.0/24".

Reading online, it is suggested that I may need to change my "Local tunnel network pool" from 10.253.0.0/24, however as everything is working I wanted to ask, are my settings below correct and should I just leave things the way they are?

For reference, my router runs Opnsense on 192.168.1.1 and within Wireguard I have set the "Peer DNS server" as 192.168.1.1

***Update***

I have today tried connecting a remote Nvidia Shield to my unRaid server via Wireguard, however it would appear that I have run into the "overlapping IP range" issue as it will not connect. As such, am I right in thinking that I need to change my whole home LAN subnet from 192.168.1.0/24 to something a little more unique to prevent overlapping, or is their a simpler solution (I'm hoping that I have misunderstood and their is an easier way)? I want to double check that this is necessary, as I've never done this before so it will be a huge undertaking for me to change everything on OPNsense, static leases, docker containers etc. I'm tempted to just keep the remote Nvidia Shield on Tailscale, however I do ultimately want everything running via Wireguard. 

Kind regards. 

unRaid Wireguard settings;

Opnsense Gateway settings;

Opnsense Static Route settings;

Opnsense Port-forwarding settings;

Edited July 7, 20241 yr by ytddewqf