Oh, what a mistake on my part. It gives me the wrong way for searching solution from the outset 
The container runs with docker-compose on the Racknerd KVM VPS. I connect to it from the home network with Linux Mint 19.3 Cinnamon and Android 10 smartphone with almost identical configs (just Addresses are different). Android uses the official Wireguard app and Desktop connects with wg-quick up wg0.
All used configs gist.