When running macOS firewall and wireguard installed from home-brew, the following script will open the firewall. Run after installation and every upgrade of `wireguard-tools` as the path to `wg-quick` will change.

unblock_wireguard.sh

#!/bin/bash

fix_wireguard() {
  local fw='/usr/libexec/ApplicationFirewall/socketfilterfw'
  local wg_sym="$(which wg-quick)"
  local wg_abs="$(greadlink -f $wg_sym)"

  sudo "$fw" --setglobalstate off
  sudo "$fw" --add "$wg_sym"
  sudo "$fw" --unblockapp "$wg_sym"
  sudo "$fw" --add "$wg_abs"
  sudo "$fw" --unblockapp "$wg_abs"
  sudo "$fw" --setglobalstate on
}

fix_wireguard;