Setup Truenas Core 12 as Wireguard VPN Peer

Howdy everybody,

I have am using an oracle instance as my wireguard server/endpoint.
I successfully setup my phone, debian laptop, and vfio debian workstation in various types of networks as peers.
I am stuck with behind a glorious CgNAT at home, but hat does not seem to be a problem for my phone or laptop to connect to the server.

It is lockdown, so I thought I’ll add my truenas core as a peer aswell. I’d spent the last 5 days trying to bend truenas’ freebsd to my will - with no success.

I’ve tried

  1. ‘native’ e.g. truenas. com/docs/core/network/wireguard
    No success.

  2. ‘jail’
    e.g. truenas. com/community/resources/how-to-setup-a-wireguard-vpn-server-in-a-jail.147/
    However I do not want the truenas jail to be a server, but only a client.
    No success

  3. Bhyve VM with debian linux with similar configuration as my debian laptop or workstation
    No success

In any case, I got as far as

peer: J/Shm.........4NGaGQ=
endpoint: 14......67:5555
allowed ips: 0.0.0.0/0, ::/0
transfer: 0 B received, 296 kB sent
persistent keepalive: every 10 seconds

but it fails at the handshake.

I presume I am overlooking a routing/tuneable/firewall detail or package rewrite/forwarding in freebsd.

Has anyone got this working at the moment? Any help is much appreciated.
At this stage I am considering trying truenas scale.

Cheers