Hi all

I have two sites.

Site A has a Unifi UDM Pro with a static WAN IP and a configured Wireguard VPN.
Site B has a GrooveA with the latest Router OS. This router is behind a NAT.

I want Site B, the Mikrotik, to join the Wireguard network. It has to make an outbound connection because it's behind the NAT.

There are only two clients at Site B. They can make their own connections to Wireguard, OR, if site-to-site is possible, that's a bonus! If I can't do site-to-site, the only reason for having the Mikrotik as a Wireguard client is so I can manage it remotely, without routing via one of the clients on site.

Any advice much appreciated!

Why not!
Sounds like a good idea.....