[Interface]
PrivateKey = {{ private_key }}
Address    = {{ wireguard_subnet_prefix}}.1/24
ListenPort = {{ wireguard_port }}
PostUp     = sysctl -w net.ipv4.ip_forward=1
PostUp     = iptables -A FORWARD -i {{ wireguard_interface }} -o %i -j ACCEPT
PostUp     = iptables -A FORWARD -i %i -j ACCEPT
PostUp     = iptables -t nat -A POSTROUTING -o {{ wireguard_interface }} -j MASQUERADE
PostDown   = sysctl -w net.ipv4.ip_forward=0
PostDown   = iptables -D FORWARD -i {{ wireguard_interface }} -o %i -j ACCEPT
PostDown   = iptables -D FORWARD -i %i -j ACCEPT
PostDown   = iptables -t nat -D POSTROUTING -o {{ wireguard_interface }} -j MASQUERADE