Решил следующими коммандами:
sudo iptables -A FORWARD -i wg0 -o virbr0 -p tcp --syn --dport 80 -m conntrack --ctstate NEW -j ACCEPT
sudo iptables -A FORWARD -i wg0 -o virbr0 -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
sudo iptables -A FORWARD -i virbr0 -o wg0 -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
sudo iptables -t nat -A PREROUTING -p tcp --dport 80 -j DNAT --to-destination 192.168.2.252
В wireguard вписал:
PostUp = iptables -A FORWARD -i wg0 -o virbr0 -j ACCEPT; iptables -A FORWARD -i wg0 -j ACCEPT; iptables -t nat -A POSTROUTING -o virbr0 -j MASQUERADE;
PostDown = iptables -D FORWARD -i wg0 -o virbr0 -j ACCEPT; iptables -D FORWARD -i wg0 -j ACCEPT; iptables -t nat -D POSTROUTING -o virbr0 -j MASQUERADE;