Wireguard - Bare metal Vs Docker

What is everyone's opinion here? I as currently hosting it on docker, but having a ton of issues around routing. I am thinking Bare metal may be the way to go, especially since I mainly use it for SSH into the VPS. Does anyone have any config that works flawlessly? It's really weird that one of my configs works super well, but I keep having SSH issues with this particular one. My main requirement is to access SSH of course and also some internal apps like Vaultwarden without opening up ports or having it accessible to the general internet. I would prefer to host on docker based on my limited knowledge, but keen to hear what everyone's set up is?