Wireguard on VPS to expose home

home_wg0.conf

[Interface]
PrivateKey = xxxx
Address = 10.0.0.2/24

[Peer]
# VPS
PublicKey = xxxx
AllowedIPs = 10.0.0.1/32
Endpoint = 35.xxx.xxx.xxx:54321
PersistentKeepalive = 25

vps_wg0.conf

[Interface]
PrivateKey = xxxx
ListenPort = 54321
Address = 10.0.0.1/24

PostUp = iptables -t nat -A PREROUTING -p tcp -i ens4 '!' --dport 22 -j DNAT --to-destination 10.0.0.2; iptables -t nat -A POSTROUTING -o wg0 -d 10.0.0.2 -j SNAT --to-source 10.0.0.1
PostUp = iptables -t nat -A PREROUTING -p udp -i ens4 '!' --dport 54321 -j DNAT --to-destination 10.0.0.2;

PostDown = iptables -t nat -D PREROUTING -p tcp -i ens4 '!' --dport 22 -j DNAT --to-destination 10.0.0.2; iptables -t nat -D POSTROUTING -o wg0 -d 10.0.0.2 -j SNAT --to-source 10.0.0.1
PostDown = iptables -t nat -D PREROUTING -p udp -i ens4 '!' --dport 54321 -j DNAT --to-destination 10.0.0.2;

[Peer]
# HOME RASPBERRY
PublicKey = xxxx
AllowedIPs = 10.0.0.2/32