如何正确地设置 wireguard 出站？

[bin456789]

我这边能用 warp ，我想让 xray 取代 warp
下面是配置内容， http 进站，wireguard 出站
浏览器代理设置成 127.0.0.1:10001
我用这个配置能正常访问不被劫持的网址，例如微软/亚马逊
也能上 https://cloudflare.com/cdn-cgi/trace ，显示我正在用 warp
但就是上不了谷歌，浏览器显示

您的连接不是私密连接
攻击者可能会试图从 www.google.com 窃取您的信息（例如：密码、通讯内容或信用卡信息）。[了解详情](chrome-error://chromewebdata/#)
NET::ERR_CERT_COMMON_NAME_INVALID
Subject: *.facebook.com

{
    "inbounds": [
        {
            "port": 10001,
            "tag": "http",
            "protocol": "http"
        }
    ],
    "outbounds": [
        {
            "tag": "wireguard",
            "protocol": "wireguard",
            "mtu": 1280,
            "settings": {
                "secretKey": "xxx",
                "address": [
                    "172.16.0.2/32",
                    "2606:xxxx/128"
                ],
                "peers": [
                    {
                        "publicKey": "xxxx",
                        "endpoint": "162.159.193.2:2408"
                    }
                ]
            }
        }
    ]
}

我把 outbounds 换成 vless 节点，就一切正常

{
    "inbounds": [
        {
            "port": 10001,
            "tag": "http",
            "protocol": "http"
        }
    ],
    "outbounds": [
        {
            "tag": "vless",
            "protocol": "vless",
            "settings": {
                "vnext": [
                    {
                        "address": "xxx.com",
                        "port": 443,
                        "users": [
                            {
                                "id": "1114b641-81f2-1111-2222-ce59e6328111",
                                "security": "auto",
                                "encryption": "none"
                            }
                        ]
                    }
                ]
            },
            "streamSettings": {
                "network": "tcp",
                "security": "tls"
            }
        }
    ]
}

请问应该怎么正确地配置 wireguard ？

[computerscot]

https://cscot.pages.dev/2023/04/13/cloudflare-warp/