On way is using (userspace) wireguard proxy which is accessible with the flyctl proxy command: wireguard tunnels from userland - #2 by kurt
Ref this example from docs on connecting to MinIO’s web-ui over (6pn) private IP with flyctl proxy: Deploy MinIO Object Storage to Fly.io · Fly Docs
Read also: WireGuard peering without proxy - #2 by kurt