Hi,
I believe than you have some error in concepts, You don't need map any port...
If you want use Wireguard VPN, then you need connect directly to VM at port 54991 using VPN IP Range, for example: 10.0.0.12:xxxx.
You only need connect to VM from Wireguard VPN inside. Only Clients joined to...