Ubuntu WireGuard GUI Installation

I’d like WireGuard installed on my Ubuntu server together with a lightweight, browser-based GUI so I can create and revoke peers without touching the command line.
The box is a clean Ubuntu instance with full root access waiting for you.

What I need from you
• Install the latest stable WireGuard kernel module and tools
• Deploy a GUI front-end (wg-dashboard, wg-ui, or any open-source alternative you recommend)
• Generate one initial client profile and verify connectivity end-to-end
• Harden the configuration (IP-forwarding, firewall rules, service autostart)
• Provide a brief README noting every command or setting you changed

Acceptance
The tunnel must come up from my test laptop, the GUI must list peers and allow new keys to be added, and all changes should survive a reboot.

When you apply, tell me about similar WireGuard setups you have completed—your hands-on experience is the single most important factor for selection.