If your ISP does CGNAT a typical WireGuard setup won’t work without a public IP address. Tailscale makes it possible to use a VPN without a public IP. I use Tailscale with Starlink which uses CGNAT.