The :8000 status server 404s on every path and the image has no curl, so the prior healthchecks could not pass. Check /sys/class/net/tun0 instead: it exists only while the WireGuard tunnel is connected, so the healthcheck reflects real VPN state.
The :8000 status server 404s on every path and the image has no curl, so the prior healthchecks could not pass. Check /sys/class/net/tun0 instead: it exists only while the WireGuard tunnel is connected, so the healthcheck reflects real VPN state.