# wireguard/wg0.conf.example
#
# Example WireGuard server configuration for VHostLoom host
# Copy to /etc/wireguard/wg0.conf and replace placeholders.

[Interface]
# Address inside the VPN (server side)
Address = 10.20.0.1/24

# WireGuard listens on UDP 51820 by default (change if you like)
ListenPort = 51820

# Server private key (generate with: wg genkey)
PrivateKey = <SERVER_PRIVATE_KEY>

# Optional: enable routing on Linux (also set sysctl)
# PostUp   = sysctl -w net.ipv4.ip_forward=1
# PostDown = sysctl -w net.ipv4.ip_forward=0

# Example peer (your laptop, desktop, etc.)
[Peer]
# Peer public key (from: wg genkey | tee peer.key | wg pubkey)
PublicKey = <CLIENT_PUBLIC_KEY>

# Allowed IPs for this peer inside VPN
# Typically a single /32 address
AllowedIPs = 10.20.0.2/32