Learn how to set up a VPN connection with systemd-nspawn container host using WireGuard, allowing traffic routing through a bastion host.