---
# WireGuard VPN configuration
# Centralized configuration for all WireGuard settings

# WireGuard network interface and port
wireguard_port: 60101
wireguard_interface: "wg0"

# WireGuard server configuration (asxpio-ops)
wireguard_ipv4: 10.20.0.10
wireguard_ipv6: fd69:69:69::1
wireguard_ipv4_network: 10.20.0.0/24
wireguard_ipv6_network: fd69:69:69::/64

# Enable UFW firewall rules (set to false to use iptables PostUp/PostDown)
wireguard_enable_ufw: false

# WireGuard clients
wireguard_clients:
  - name: asxpio-services
    ipv4: 10.20.0.20
    ipv6: fd69:69:69::20
    preshared_key: true
    persistent_keepalive: 25
  - name: laptop
    ipv4: 10.20.0.2
    ipv6: fd69:69:69::2
    preshared_key: true
    persistent_keepalive: 25
  - name: aleks
    ipv4: 10.20.0.3
    ipv6: fd69:69:69::3
    preshared_key: true
    persistent_keepalive: 25
  - name: zerrtika
    ipv4: 10.20.0.4
    ipv6: fd69:69:69::4
    preshared_key: true
    persistent_keepalive: 25
  - name: sanya
    ipv4: 10.20.0.5
    ipv6: fd69:69:69::5
    preshared_key: true
    persistent_keepalive: 25

# DNS servers for VPN clients
wireguard_dns_servers:
  - 1.1.1.1
  - 1.0.0.1

# Optional: Additional routes for split tunneling
# wireguard_additional_routes:
#   - 192.168.1.0/24