# wg-quick config, sops-encrypted whole-file (format = "binary").
# Same format for wg2.conf. Encrypt with: sops -e -i secrets/wg0.conf
[Interface]
PrivateKey = <client-private-key>
Address = 10.20.0.2/24
DNS = 10.20.0.1

[Peer]
PublicKey = <server-public-key>
AllowedIPs = 10.20.0.0/24
Endpoint = 198.51.100.7:51820
PersistentKeepalive = 25