[Interface] Address = 10.0.0.1/24 PostUp = firewall-cmd --add-masquerade PostDown = firewall-cmd --remove-masquerade ListenPort = {{ network.wireguard.port }} PrivateKey = {{ privatekey }}