Your distro's wireguard-dkms package is your friend.