iptables -t nat -A PREROUTING -s <wg container ip> -d <docker host ip> -p tcp --dport 80 -j DNAT --to-destination <web container ip>
iptables -I FORWARD 1 -s <wg container ip> -d <web container ip> -j ACCEPT
iptables -I FORWARD 2 -d <wg container ip> -s <web container ip> -j ACCEPT