How to set up a VPN kill switch with wireguard and PIA VPN

I have created a VPN gateway VM using kicksecure-18, NetVM sys-firewall, PIA vpn and wireguard; everything is working very well but I would like to know how to add a VPN kill switch that is not included into the run_setup.sh, GitHub - pia-foss/manual-connections: Scripts for manual connections to Private Internet Access · GitHub. I also would like to use nftables. Thanks.

Do the PIA VPN configs use hostnames or IP addresses? In general, you should be able to do a lot with qvm-firewall, but it’s easier if it’s IP addresses.

PIA VPN uses hostnames, where do you think I can find a guide for this? Thanks