[Interface]
PrivateKey = ${wg_key}
Address = ${wg_address}/${wg_prefix:-32}
ListenPort = ${wg_port:-9983}
PostUp = iptables -A FORWARD -i wg0 -j ACCEPT;
{{ if len "${wg_routes:-}" }}{{ range "$wg_routes" | split "," }}PostUp = ip -4 route add {{ . }} dev wg0 metric 31
{{ end }}{{ end }}
PostDown = iptables -D FORWARD -i wg0 -j ACCEPT
{{ if len "${wg_routes:-}" }}{{ range "$wg_routes" | split "," }}PostDown = ip -4 route del {{ . }} dev wg0 metric 31
{{ end }}{{ end }}
Table = off

{{ range files "wireguard/peers" }} {{ if ne . "${tinc_peer_name}" }}
[Peer]
{{ include (print "wireguard/peers/" .) }}
PersistentKeepalive = 25
{{ end }}{{ end }}