To avoid leaks follow guide provided by @anon88979181. Same can be verified with guides provided by Mullvad and IVPN.
This is what I got after modifying interface of wireguard conf file
curl --interface <physical interface name> https://ipinfo.io
curl: (7) Failed to connect to ipinfo.io port 443 after 200 ms: Could not connect to server
Before I got real IP and other details.
Also, I tried firewalld workaround in OP’s post but it didn’t work and wireguard cli can’t establish connection with VPN server.