Well i think this picture sums up my idea
I will contect to my server with VPN so i can access services on lan. Then i connect to internet via Protons VPN.
When i uses the ProtonVPN app i get no dns leak and uses theirs DNS.
I did allow all traffic on my wireguard tunnel.
I think i will install it barebone. Thanks for your input
Aha its the picture from the guide i linked in my original post.
I looked at the link you posted and will compare it to my setup and consider to install wireguard bare metal.
Thanks for your input 😄