You can run wireguard in a Linux network namespace, then start the app in that namespace. You can also use Systemd or Docker.