I'm also working on something like this

https://github.com/place1/wireguard-access-server

It's mostly a hobby project but it'll run a userspace wireguard implementation (boringtun) and a webapp to configure it.

You can run it in docker

    docker run \
      -it \
      --rm \
      --name wg \
      --cap-add NET_ADMIN \
      --device /dev/net/tun:/dev/net/tun \
      -p 8000:8000/tcp \
      -p 51820:51820/udp \
      place1/wireguard-access-server:0.0.5