Hi James,
sorry for the delayed response. We initially had the problem that the Wireguard tunnel between an on premises system and a Cloudron Server on Hetzner couldn't be established.
The WG config was correct. We tried it on a different server on Hetzner with no problem. There seemed to be a problem with the Cloudron Server.
Then, my colleague figured out that there was a problem with the Cloudron internal firewall. Once he changed the settings there, the connection was established with no problem.
Thanks!
Arne