WireGuard VPN Configuration on Windows Server (IONOS Cloud Server)

I run a Windows Server 2022 instance on IONOS Cloud and need a reliable WireGuard VPN configured for roughly twenty concurrent users. The machine already runs a few other small services, so the VPN must coexist cleanly without opening unnecessary ports or weakening overall security. I’m comfortable with the standard L2TP/IPsec stack but haven’t decided whether we should tweak any of the underlying security parameters (cipher suites, certificate handling, user-auth back-end, etc.). I’d appreciate your guidance on best-practice hardening that still keeps user onboarding straightforward. Once the tunnel is live I’ll need: • User accounts (or a clearly documented template) for up to 20 people • A short PDF or markdown guide showing Windows, macOS, iOS and Android connection steps • Confirmation that DNS, RDP and file-sharing services already on the server remain accessible and unharmed • A quick hand-over session so I can add or revoke users myself Successful delivery will be a stable, encrypted connection that passes an external leak test and survives a reboot without manual intervention.