WireGuard App on Client Side

[MagikMark]

What would be a good practice running Torguard App on Client Side?  Most of the guides found here are about running wireguard inside OPNsense.

What Firewall Rules and NATs need to be set for seamless flow of traffic both getting out and coming in?