Unable to access Samba file server using wireguard

I'm trying to create a small file server for myself and few friends. I have successfully installed OMV5 and confirgured Samba. Everything is working as should, but only on local network. I can't get my head around how to make it accessible on the Internet.

I have a router from ISP with addresses in range 192.168.0.0/24 and behind it I used additional router with 10.186.1.0/24 to assign static IP to the server and do port forwarding because I have dynamic public IP.

I'm not good at networking, but from what I have read to make my server accessible from outside I need DuckDNS, swag and wireguard dockers. I have installed all of them using the following configuration, but I still can't connect and I don't understand why. Ports have been already forwarded.

Any help is greatly appreciated.

version: "2.1"
services:
duckdns:
image: ghcr.io/linuxserver/duckdns
container_name: duckdns
environment:
- PUID=1007 #optional
- PGID=100 #optional
- TZ=Europe/London
- SUBDOMAINS=mysubdomain
- TOKEN=123-456-789
- LOG_FILE=true #optional
volumes:
- /srv/dev-disk-by-label-storage/appdata/duckdns:/config #optional
restart: unless-stopped
swag:
image: ghcr.io/linuxserver/swag
container_name: swag
cap_add:
- NET_ADMIN
environment:
- PUID=1007
- PGID=100
- TZ=Europe/London
- URL=mysubdomain.duckdns.org
- SUBDOMAINS=wildcard
- VALIDATION=duckdns
- DUCKDNSTOKEN=123-456-789 #optional
- EMAIL=my@email.com #optional
- STAGING=false #optional
volumes:
- /srv/dev-disk-by-label-storage/appdata/swag:/config
ports:
- 450:443
- 90:80 #optional
restart: unless-stopped
wireguard:
image: ghcr.io/linuxserver/wireguard
container_name: wireguard
cap_add:
- NET_ADMIN
- SYS_MODULE
environment:
- PUID=1007
- PGID=100
- TZ=Europe/London
- SERVERURL=auto #optional
- SERVERPORT=51820 #optional
- PEERS=2 #optional
- PEERDNS=1.1.1.1 #optional
- INTERNAL_SUBNET=10.13.13.0 #optional
- ALLOWEDIPS=0.0.0.0/0 #optional
volumes:
- /srv/dev-disk-by-label-storage/appdata/wireguard:/config
- /lib/modules:/lib/modules
ports:
- 51827:51820/udp
sysctls:
- net.ipv4.conf.all.src_valid_mark=1
restart: unless-stopped

Apologies if I confused you. English is not my native language.

I have public dynamic IP (7x.xx.xx.xxx) from my ISP. On the same router from ISP I have a local network with addresses in the range 192.168.0.0/24. This router is connected to another router with addresses in the range 10.186.1.0/24 where the server is plugged in.

Internet ----- router1 (192.168.0.0) ----- router2 (10.186.1.0) ----- server

Router2 is the only one I have full access to. I thought it's the only option to do port forwarding which as far as I'm concerned is necessary. I can't login into router1, just plug an ethernet cable. It works in DHCP mode, so my server would also have dynamic IP in my local network.

I have only forwarded ports on router2 because I can't log in to router1.

Yesterday I came across information about docker called traefik. Maybe this would be a viable solution to my problem? The more I read the more confused I'm.

Internet ----- router1 (192.168.0.0) ----- server