Wireguard VPN Split Tunnel

[SteelCityColt]

I've tried following this guide (https://docs.opnsense.org/manual/how-tos/wireguard-selective-routing.html) to set up the same Wireguard Tunnel I had on my pfSense setup. Right now I am using Lan_net as the alias as I want to route all 'LAN' traffic for the now via the tunnel. Later I plan to add other VLANs that will go out via the normal WAN route.

However, everytime it's enabled I run into not being able to access websites due to certificate issues? I can ping the tunnel internal IP fine, but anything beyond no dice. I vaguely remember when I set this up with pfSense the first time I had an issue with using Unbound resolver and false postives for rebind attacks but can't remember how I overcame it and I've sold my pfSense box so can't check the config....

Any ideas appreciated!