You have to enable Route Allowed IP's and also add the subnet of the VPS in allowed IP's
The firewall for the wgclient must be setup like it is a WireGuard server so currently this is not OK.
Easiest just add the wgclient interface to the lan zone and delete all other stuff regarding wgclient in the firewall.
On the VPS you have to add to the Allowed IP's in the routers peer also the subnet of the router
So it should look something like this
AllowedIPs = 10.0.1.2/32, 192.168.11.0/24
So on the VPS a route is added for 192.168.11.0.24 via the WG peer.
Now if you connect with your phone on cellular to the VPS and then on your phone you should be able to ping 192.168.11.1 or when you go to http://192.168.11.1 you should see LuCi ![]()
Provided everything is setup correctly on the VPS