If you want to use openvpn (neither for wireguard), don’t touch your sys-net or sys-firewall. Use another qubes and just do like this documentation:
Just follow the documentation to the letter and everything will be fine
So for wireguard, follow @solene tuto and for openvpn, follow the @taradiddles tuto…