Note that most wireguard clients wont re-resolve when the ends entry and they will keep silently a failed tunnel so you would have to do some measure to periodically restart the tunnel.