[zeroflow]

You should be able to have two peers. The only thing I see is, that you may need to explicitly define the routing.

The first peer is easy, with allowed IPs of 10.10.0.0/8. The 2nd peer will need more configs, as it should route everything else.

See this answer for an example where all ranges that are not RFC1918 are listed: https://serverfault.com/a/304791 I expect, that you need to enter those ranges as AllowedIPs for the peer that should route to the public internet.

[winecamera]

There's this handy website that calculates the allowed CIDRs with exclusions https://www.procustodibus.com/blog/2021/03/wireguard-allowed...

[cpach]

Semi-related: I really like the typeface/layout on that site!