From fe0087314d9faa45318e900a01e7b9af55b7872d Mon Sep 17 00:00:00 2001
From: Nathan Young <pizza2d1@proton.me>
Date: Wed, 23 Sep 2026 23:44:54 -0600
Subject: [PATCH] Add wireguard server

---
 wireguard/.env                               |  11 ++++++++
 wireguard/README.md                          |   4 +++
 wireguard/docker-compose.yml                 |  28 +++++++++++++++++++
 wireguard/wireguard/.donoteditthisfile       |   7 +++++
 wireguard/wireguard/coredns/Corefile         |   6 ++++
 wireguard/wireguard/peer1/peer1.conf         |  11 ++++++++
 wireguard/wireguard/peer1/peer1.png          | Bin 0 -> 1145 bytes
 wireguard/wireguard/peer1/presharedkey-peer1 |   1 +
 wireguard/wireguard/peer1/privatekey-peer1   |   1 +
 wireguard/wireguard/peer1/publickey-peer1    |   1 +
 wireguard/wireguard/peer2/peer2.conf         |  11 ++++++++
 wireguard/wireguard/peer2/peer2.png          | Bin 0 -> 1130 bytes
 wireguard/wireguard/peer2/presharedkey-peer2 |   1 +
 wireguard/wireguard/peer2/privatekey-peer2   |   1 +
 wireguard/wireguard/peer2/publickey-peer2    |   1 +
 wireguard/wireguard/peer3/peer3.conf         |  11 ++++++++
 wireguard/wireguard/peer3/peer3.png          | Bin 0 -> 1135 bytes
 wireguard/wireguard/peer3/presharedkey-peer3 |   1 +
 wireguard/wireguard/peer3/privatekey-peer3   |   1 +
 wireguard/wireguard/peer3/publickey-peer3    |   1 +
 wireguard/wireguard/server/privatekey-server |   1 +
 wireguard/wireguard/server/publickey-server  |   1 +
 wireguard/wireguard/templates/peer.conf      |  11 ++++++++
 wireguard/wireguard/templates/server.conf    |   6 ++++
 wireguard/wireguard/wg_confs/wg0.conf        |  25 +++++++++++++++++
 25 files changed, 142 insertions(+)
 create mode 100644 wireguard/.env
 create mode 100644 wireguard/README.md
 create mode 100644 wireguard/docker-compose.yml
 create mode 100644 wireguard/wireguard/.donoteditthisfile
 create mode 100644 wireguard/wireguard/coredns/Corefile
 create mode 100644 wireguard/wireguard/peer1/peer1.conf
 create mode 100644 wireguard/wireguard/peer1/peer1.png
 create mode 100644 wireguard/wireguard/peer1/presharedkey-peer1
 create mode 100644 wireguard/wireguard/peer1/privatekey-peer1
 create mode 100644 wireguard/wireguard/peer1/publickey-peer1
 create mode 100644 wireguard/wireguard/peer2/peer2.conf
 create mode 100644 wireguard/wireguard/peer2/peer2.png
 create mode 100644 wireguard/wireguard/peer2/presharedkey-peer2
 create mode 100644 wireguard/wireguard/peer2/privatekey-peer2
 create mode 100644 wireguard/wireguard/peer2/publickey-peer2
 create mode 100644 wireguard/wireguard/peer3/peer3.conf
 create mode 100644 wireguard/wireguard/peer3/peer3.png
 create mode 100644 wireguard/wireguard/peer3/presharedkey-peer3
 create mode 100644 wireguard/wireguard/peer3/privatekey-peer3
 create mode 100644 wireguard/wireguard/peer3/publickey-peer3
 create mode 100644 wireguard/wireguard/server/privatekey-server
 create mode 100644 wireguard/wireguard/server/publickey-server
 create mode 100644 wireguard/wireguard/templates/peer.conf
 create mode 100644 wireguard/wireguard/templates/server.conf
 create mode 100644 wireguard/wireguard/wg_confs/wg0.conf

diff --git a/wireguard/.env b/wireguard/.env
new file mode 100644
index 0000000..f36c4de
--- /dev/null
+++ b/wireguard/.env
@@ -0,0 +1,11 @@
+# These top ones are required to be filled out
+
+# Mullvad keys work here
+WIREGUARD_PRIVATE_KEY=
+WIREGUARD_ADDRESSES=
+
+# Optional vars
+# Exposed port (default is 51820)
+PORT=1984
+# Number of client.conf files you want automatically generated (into /config/peer*/peer*.conf)
+PEERS=
diff --git a/wireguard/README.md b/wireguard/README.md
new file mode 100644
index 0000000..e1c5881
--- /dev/null
+++ b/wireguard/README.md
@@ -0,0 +1,4 @@
+Changes to the docker-compose and .env files may not affect the previously made wireguard config files. So it is recommended to:
+- Stop/Remove the container
+- Delete the previous configuration (default location is ./wireguard)
+- Start the container
diff --git a/wireguard/docker-compose.yml b/wireguard/docker-compose.yml
new file mode 100644
index 0000000..385df69
--- /dev/null
+++ b/wireguard/docker-compose.yml
@@ -0,0 +1,28 @@
+---
+services:
+  wireguard:
+    image: lscr.io/linuxserver/wireguard:latest
+    container_name: wireguard
+    cap_add:
+      - NET_ADMIN
+      - SYS_MODULE #optional
+    environment:
+      - PUID=1000
+      - PGID=1000
+      - TZ=Etc/UTC
+      - SERVERURL=wg.happylizard.me #optional
+      - PEERS=${PEERS:-3}
+      - SERVERPORT=${PORT:-51820} #optional
+      - PEERDNS=auto #optional
+      - INTERNAL_SUBNET=10.20.0.0 #optional
+      - ALLOWEDIPS=0.0.0.0/0 #optional
+      - PERSISTENTKEEPALIVE_PEERS= #optional
+      - LOG_CONFS=true #optional
+    volumes:
+      - ./wireguard:/config
+      - /lib/modules:/lib/modules #optional
+    ports:
+      - ${PORT:-51820}:${PORT:-51820}/udp
+    sysctls:
+      - net.ipv4.conf.all.src_valid_mark=1
+    restart: unless-stopped
diff --git a/wireguard/wireguard/.donoteditthisfile b/wireguard/wireguard/.donoteditthisfile
new file mode 100644
index 0000000..03ab3f5
--- /dev/null
+++ b/wireguard/wireguard/.donoteditthisfile
@@ -0,0 +1,7 @@
+ORIG_SERVERURL="wg.happylizard.me"
+ORIG_SERVERPORT="1984"
+ORIG_PEERDNS="10.20.0.1"
+ORIG_PEERS="3"
+ORIG_INTERFACE="10.20.0"
+ORIG_ALLOWEDIPS="0.0.0.0/0"
+ORIG_PERSISTENTKEEPALIVE_PEERS=""
diff --git a/wireguard/wireguard/coredns/Corefile b/wireguard/wireguard/coredns/Corefile
new file mode 100644
index 0000000..e26fbe6
--- /dev/null
+++ b/wireguard/wireguard/coredns/Corefile
@@ -0,0 +1,6 @@
+. {
+    loop
+    errors
+    health
+    forward . /etc/resolv.conf
+}
diff --git a/wireguard/wireguard/peer1/peer1.conf b/wireguard/wireguard/peer1/peer1.conf
new file mode 100644
index 0000000..b93ea11
--- /dev/null
+++ b/wireguard/wireguard/peer1/peer1.conf
@@ -0,0 +1,11 @@
+[Interface]
+Address = 10.20.0.2
+PrivateKey = 2Me6IkZWRid7dL7B0uQqyGAgNzVrNbzfWOd8tN2jYmw=
+ListenPort = 51820
+DNS = 10.20.0.1
+
+[Peer]
+PublicKey = eEYoSfzAsXWz++EV7y8h2DS7RubpyiGJojx6V6HgAiI=
+PresharedKey = 5WP5+4ZIy6a8ROn/2ZKaYT0m/23sbOHMFvT/euWH/Cw=
+Endpoint = wg.happylizard.me:1984
+AllowedIPs = 0.0.0.0/0
diff --git a/wireguard/wireguard/peer1/peer1.png b/wireguard/wireguard/peer1/peer1.png
new file mode 100644
index 0000000000000000000000000000000000000000..2620f1da554cc47a1f20a1e27891bd3c9f72fa90
GIT binary patch
literal 1145
zcmV-<1cv*GP)<h;3K|Lk000e1NJLTq007Sb007Sc0{{R3Xipa$00006P)t-s00030
z|No`gpWOfe00MMUPE-H?$hF_c00009a7bBm000XT000XT0n*)m`~Uz13rR#lR9J=W
zm_e?aN)Sa0G3XiI08(#*8Cx<Nu<-_9OFiptAoT`d)&u1Fr)(#Yz7#1bPlK!k`B)FA
zzE$@&qQ5=lANo_Yi`;YEhjYr?ZD=)>edtA^8y(7*<&oo>q?4^l{dMT?`UOgy$aT=Q
zZu~osMWNv<bPeSx@j0}swwlWvzD2j7PrHgVs?SgsIln?wL;EK8ml}83COw;c{wmbp
zBi3um{r^5cm(qdk$a3Rc<38#>#s?SrDYm~yyYx*(0A;NrBWt(G&@O`?p-HW}@CZpv
zqPaXrY7*UuYFwop+U{e2$!9lGUR?%1I&xe@A2l9zyN&IkNK5Wj-Dn@STZl*$&0lJ}
zR`k$5M?ZR%;zXshpi<7uKAzoM050?#`b%Qb+dar_+%8#~-101Lv=0cWs1~XrLwVHx
zo;dNNBb~Q_W~2h!)fB~#86AGK^Y~KMRE~t;+gZvoZq0kWT<FkVn2o7Ds$6p41(~Yc
z-?!mIxt#~;Moy?L(t1_<BQ_7xbaqrYaOb*=@re?K_}07+Jxv3x*0W)zX`BPyv~{9x
zq<UU#>06uUjB$EAolT8ybR-4^*D6XiQh6lq{G8N}_7NY9Goy_4sth8gkaR)a2%~w_
zvgYk-`fpe4+wMPpfoyKfVvVyfhZVt7b3fvkX-2G2wk}{aeK(YOP&Z;+NZ2r}W#j~X
zZi3b3=tc)q7uQDfi8`1>pCeYQew6x2^^r(Z1RmUWo9raI5tSsB38pi~L+Q;z2OZUq
z4y6dJ6yK0iEa}bENBoFswpv^)hXs}P^_%S`>PEyKwDd@HCB3tCBgHvojBcdaD!}6}
z!F-{q_M7f)h%SVpri3`-Yhd;ld?)p9L-Zll_Q*_cvIJRFmw@0&&gw=_Ggj+FyqoBF
zS2Kv)D~tNjk#!EFS;UWXmDeM1Q9q)Xcls!k=Lu$nMqK;HAabGIf+7-XAC~mcmF1}J
zJvV%4#8~M>){8om@d&!i-snbXX~wc^`(TFKrS1DqSGthe7-!GYvRUf_Ne{<4C47N2
zt`_M(4!Z=5yDUNdD3hJeCgHPmDB|C`flqWJ){DQ}4GbT`Ek0`&w)|L12V%K#gj?uu
zOg4m6nZx$+BZ-e}1MN_DF_!dRT^Zd-6WiVvpS{}VsJ9~L*G0W(XOagx5f`Hr`bsGX
z><eUF$^6k(F;?3J6G}hH+=Vzy;mP`u4bg06F(Y#$+xb?L5D{g{JjFSskHh*9c5|ny
zRbL4TYFpsrljmKC43HQ;mh?DY`se?z&~-Eyo5iMwzGu<TS06rv0}f@ecP9NkTa4_!
zL3&O!4vA51gV`jKvrOtowl^QzIoLQ_v%NR4*Adl^etY~we~A7A1ofs@c^x^C00000
LNkvXXu0mjff|V!*

literal 0
HcmV?d00001

diff --git a/wireguard/wireguard/peer1/presharedkey-peer1 b/wireguard/wireguard/peer1/presharedkey-peer1
new file mode 100644
index 0000000..d743015
--- /dev/null
+++ b/wireguard/wireguard/peer1/presharedkey-peer1
@@ -0,0 +1 @@
+5WP5+4ZIy6a8ROn/2ZKaYT0m/23sbOHMFvT/euWH/Cw=
diff --git a/wireguard/wireguard/peer1/privatekey-peer1 b/wireguard/wireguard/peer1/privatekey-peer1
new file mode 100644
index 0000000..8f2d2f9
--- /dev/null
+++ b/wireguard/wireguard/peer1/privatekey-peer1
@@ -0,0 +1 @@
+2Me6IkZWRid7dL7B0uQqyGAgNzVrNbzfWOd8tN2jYmw=
diff --git a/wireguard/wireguard/peer1/publickey-peer1 b/wireguard/wireguard/peer1/publickey-peer1
new file mode 100644
index 0000000..e05a086
--- /dev/null
+++ b/wireguard/wireguard/peer1/publickey-peer1
@@ -0,0 +1 @@
+c+993PShllBNgnR/phaLym8tTW4QMjbeAmh+67ybxDU=
diff --git a/wireguard/wireguard/peer2/peer2.conf b/wireguard/wireguard/peer2/peer2.conf
new file mode 100644
index 0000000..810c040
--- /dev/null
+++ b/wireguard/wireguard/peer2/peer2.conf
@@ -0,0 +1,11 @@
+[Interface]
+Address = 10.20.0.3
+PrivateKey = 8FM+qjgHlcmWjVKYaPKH8qM7HtfXbcYf0A8lXGJ160E=
+ListenPort = 51820
+DNS = 10.20.0.1
+
+[Peer]
+PublicKey = eEYoSfzAsXWz++EV7y8h2DS7RubpyiGJojx6V6HgAiI=
+PresharedKey = bJnoOmSwf9tbLt59nMNRdL98CtC+gMLczbqz/6hBJzo=
+Endpoint = wg.happylizard.me:1984
+AllowedIPs = 0.0.0.0/0
diff --git a/wireguard/wireguard/peer2/peer2.png b/wireguard/wireguard/peer2/peer2.png
new file mode 100644
index 0000000000000000000000000000000000000000..9b88ed20d4a625da6f4e8806df7fbbf9de2c7a81
GIT binary patch
literal 1130
zcmV-w1eN=VP)<h;3K|Lk000e1NJLTq007Sb007Sc0{{R3Xipa$00006P)t-s00030
z|No`gpWOfe00MMUPE-H?$hF_c00009a7bBm000XT000XT0n*)m`~Uz0{7FPXR9J=W
zn7yszIuJ(3P{7P?Kmgld#+IxGWVr#kC1z?v02`1p1%l?Ck?(HsfcLN%rEA>a!bkAX
z^YeW}i~i?J{-Qrci^yw=OWM0>megpeOKL@;8?CxOQ+!X&XOp|kx6(dS`_c=jv}dgP
zDa6ttSA~X4s4I0XaY)UojZSq4S5co-xB6DOsUD$@vR^{FciP^j{k6qK=1zC}U;T)B
zbyNGVzu%>FAhiR}_YglCm#j;UZvy>lHV0aSPp<E&epDn=dh4q(`H@=nb>u6QdL*mY
zk>_uEeP}IvA9M-L667)M_e^?qOn$_hN3QQ8&ouX$riw?B*QRcylXP2Mf(~hZY>X29
zAbq}owr0${X%j@fMyX5Q@4=5&ox4fjS_hFk&rEWgn)ep{Xk)G`L$q4y>w9Zo%=>wG
zAF_@L@gT`*K08X$5G~P-4$;qs3e|NYvCSZr<cR16)ZX~+n>@)zXzzjYNuQz{sm4)s
z%mgC0N;V#x{M%73bjbYBIE1tMnY7Saar`-k3ne|s>W1VJj%S)B&%IngHikP|F$jU$
zXP&!avgt;PRJA13&on;@<H^Y_s2?TasDl~AeA^Hr^c-hYH(HC5TLL{fd1^ig9q0cJ
zkq>RV*o!hXBi*GmyncJ$iOdTc#+*)|MMc`X&8E5$!gwoZv9d^@KbcKzBDxXhTmpft
zQp?$*N5*Q^jaEHZh=QPzUfdR;qpzYHov}DJ)?g01PL&B-H+7?x<pe!9{ow)I^oAfJ
zestjew%ws@c+L3?MwTw1(^9d9KDB+G@4033kr3TzvFbESGApF|e33);+jmQGAsm*?
z<SCf7Z7C0BjigKC1r$fJiWUVrU&m09%Fm>3v=$SJj!E1QrTL|15MQbEA^hu2IEkMP
zF((kl-F);4BBfLxTb#|dlo_9Ile!Uo{+Zfd8X_LnSGGs>;z!gA{jm+an5vKVzWmxM
zJ;(;o<gs~|`F?6UoAb|B=|W3F#-*q383CbDQ6#3ok8s$LtqDobJKjA8tJ)a!0<x=L
zH|=bX>=kz|3yIl`ZiK_y)MT>C^@<Feg^fR(o(l!~yyE_S61xg*`Ys5jA03%tZ0|%=
zy3{s3TYG-C6c54|dLhvKO#9OumSVB>`Oy;2JCUtV<U!9ZrTy*zP9!K~!(PEUiiL4M
zTKT8=5ijVgn1Hhn43?H(*5*QX^W6|z41&Hwh4!xeIIItGH>Uw8mR&HJcgDwJT|oB9
zrvq*xhz536M8YN1O}N8(cv~G$Ey|bBGuirtXAP-+P3M-Y7m)7kIcBM*Y@EEY>rD0|
w>h;8BaP3SK``y5PjwpWgKfkm6MSq0;0h0=qDSIZiA^-pY07*qoM6N<$f++_l$^ZZW

literal 0
HcmV?d00001

diff --git a/wireguard/wireguard/peer2/presharedkey-peer2 b/wireguard/wireguard/peer2/presharedkey-peer2
new file mode 100644
index 0000000..4a9afb7
--- /dev/null
+++ b/wireguard/wireguard/peer2/presharedkey-peer2
@@ -0,0 +1 @@
+bJnoOmSwf9tbLt59nMNRdL98CtC+gMLczbqz/6hBJzo=
diff --git a/wireguard/wireguard/peer2/privatekey-peer2 b/wireguard/wireguard/peer2/privatekey-peer2
new file mode 100644
index 0000000..860bf9c
--- /dev/null
+++ b/wireguard/wireguard/peer2/privatekey-peer2
@@ -0,0 +1 @@
+8FM+qjgHlcmWjVKYaPKH8qM7HtfXbcYf0A8lXGJ160E=
diff --git a/wireguard/wireguard/peer2/publickey-peer2 b/wireguard/wireguard/peer2/publickey-peer2
new file mode 100644
index 0000000..afc1f77
--- /dev/null
+++ b/wireguard/wireguard/peer2/publickey-peer2
@@ -0,0 +1 @@
+mNTq/XTXXZFtyXc7t1uQ9vdcwneU2XkWrWzjPgRe/1E=
diff --git a/wireguard/wireguard/peer3/peer3.conf b/wireguard/wireguard/peer3/peer3.conf
new file mode 100644
index 0000000..06b1d0b
--- /dev/null
+++ b/wireguard/wireguard/peer3/peer3.conf
@@ -0,0 +1,11 @@
+[Interface]
+Address = 10.20.0.4
+PrivateKey = SNzbsWlC/6+TI74yStzmuzKog6fAPBStdlfffp/nk3c=
+ListenPort = 51820
+DNS = 10.20.0.1
+
+[Peer]
+PublicKey = eEYoSfzAsXWz++EV7y8h2DS7RubpyiGJojx6V6HgAiI=
+PresharedKey = YLYvms8UHwE2IkF7WgIrDNDisUK4JveacI5EQpAHHUw=
+Endpoint = wg.happylizard.me:1984
+AllowedIPs = 0.0.0.0/0
diff --git a/wireguard/wireguard/peer3/peer3.png b/wireguard/wireguard/peer3/peer3.png
new file mode 100644
index 0000000000000000000000000000000000000000..3700ad26c8057b0658c8033de59cffabf28b9473
GIT binary patch
literal 1135
zcmV-#1d#iQP)<h;3K|Lk000e1NJLTq007Sb007Sc0{{R3Xipa$00006P)t-s00030
z|No`gpWOfe00MMUPE-H?$hF_c00009a7bBm000XT000XT0n*)m`~Uz10ZBwbR9J=W
zm_e?iIuJ#T7<fiDfaGm><}JYnlCS~Tl4stAB{l#v28jBnlGi=>QcJC3+9-;69E3x;
z>ej92<d28@hyE6A&OP~#=UA$Xt>kr!y>r2gb~y*XP7;>Gb*?tKA7cNK8z^(aTI-VQ
z5apd#f%;o$EbE@b%rBQ#%KG+q(JS{|I-A2aB9~uhciuvBj&eeqBW$j6-jwrqpbUup
z8cYAb&+n}?AdV|K#|djC*-~KdekYp&ZLV)}JC$`2=MsCTc{Rs7NZwIqeTDNGb-%7e
zOoAC*zJI!Q^X*>RrJTBPg*)wN&+VMn>2QNPpQ+s?T;%*Ab|mK`la?}*_D8!M<O8o@
zM_UYh<XGQYLHz7>OK0~<Q6pmWqb$cdd)KA<D6T2(bl4G5o$|_B`%$|{Sg5J$k{zKE
z&a-PR`~Jx&)etFmw2MsAE_vOH2KMdNnR}w#K(%4hNzvRc(s$mChkJdaVM3C%WR_9~
zjja%kM-KZZqil#EG`a*eUb_@7Pfa14!HhN%iTug6(P)IXZ@Gtn+fj0lqutO7A7*5n
z8qeo98a6~Ucs}JbWiGChwh0y$GorV;q-oC|<3T;5LUhJpM)WN7=fQpv;mEnhd5Ctj
z`ICj-DwutT4htO?dAFk-%^{JvLRESiO;2sUzd3J0TXYTGpS6gICqJtO=SQO~h>E5j
zU+k3jFHO-a(Q3tvc3LVblo2!x4^5|zdJ@ct=c}gq`eX^uohuczA2*O{FDb+oT#7oq
zxBnF=6B40zR37>LRMV{Y)aN%)CbX&E;(63f4JsWy&gU!UHndaYDvw&@?0$2!mpdPy
zs<a_8leFaZF+W4<AHrLZrNNA@gjcN3coN%1WcDO{Sc=$D#O+Xt*l#kwzCI1&`86;m
zM0#Vq5%Y<zomhy*t&7@GJcmR##0KyRm`19JF(H_dHf#O0xJOYZP&Cf3EM}zjcxY{^
zBPG0%+o;fBMriNlaF00K+I@71$b75PhBO*FxUpYMF7zEb&iPC9EC}hIBWqFJB$Za^
ztT|>!yQYxv{PCc3sUmf;eskW2geI7A-Grm!az#z}kEt*s;d*`I>KSCz<+3gxJKB*)
zs9Sjplntk+w#V6#WH-=aJ{yO=H97{mpJ<rSMm=UGtg!Q4<l|CU^agU695u|7XbXGN
zaTtMbAP#z#9GaF4L~jiXCt^nQuOTsB5mIJeROlS@uMTTM3|S;RU2IYZ_4&Vnu5|-_
zo_yhR2tszRa`NrIroxO;eHFZ!W)z+ZEqax32aN}#C0DSH{fi;J)Xv{PLOgZYznuQ7
z1i|DjMzJH^FT}@(g%P;uI5X*pWJiBI{-M7_{{f(VhdSkKmV^KR002ovPDHLkV1o7_
B9y$O3

literal 0
HcmV?d00001

diff --git a/wireguard/wireguard/peer3/presharedkey-peer3 b/wireguard/wireguard/peer3/presharedkey-peer3
new file mode 100644
index 0000000..3122431
--- /dev/null
+++ b/wireguard/wireguard/peer3/presharedkey-peer3
@@ -0,0 +1 @@
+YLYvms8UHwE2IkF7WgIrDNDisUK4JveacI5EQpAHHUw=
diff --git a/wireguard/wireguard/peer3/privatekey-peer3 b/wireguard/wireguard/peer3/privatekey-peer3
new file mode 100644
index 0000000..d22b51b
--- /dev/null
+++ b/wireguard/wireguard/peer3/privatekey-peer3
@@ -0,0 +1 @@
+SNzbsWlC/6+TI74yStzmuzKog6fAPBStdlfffp/nk3c=
diff --git a/wireguard/wireguard/peer3/publickey-peer3 b/wireguard/wireguard/peer3/publickey-peer3
new file mode 100644
index 0000000..0fdb525
--- /dev/null
+++ b/wireguard/wireguard/peer3/publickey-peer3
@@ -0,0 +1 @@
+w34g7tWb9txMZmluL1VdRH4o0UTJWfOjFrZDKOkdFHQ=
diff --git a/wireguard/wireguard/server/privatekey-server b/wireguard/wireguard/server/privatekey-server
new file mode 100644
index 0000000..0e583c5
--- /dev/null
+++ b/wireguard/wireguard/server/privatekey-server
@@ -0,0 +1 @@
++FCo3yAN1vvpckw4ndWEgA3WtdG7SjaiiJqCResRVlU=
diff --git a/wireguard/wireguard/server/publickey-server b/wireguard/wireguard/server/publickey-server
new file mode 100644
index 0000000..6c3891f
--- /dev/null
+++ b/wireguard/wireguard/server/publickey-server
@@ -0,0 +1 @@
+eEYoSfzAsXWz++EV7y8h2DS7RubpyiGJojx6V6HgAiI=
diff --git a/wireguard/wireguard/templates/peer.conf b/wireguard/wireguard/templates/peer.conf
new file mode 100644
index 0000000..d987dba
--- /dev/null
+++ b/wireguard/wireguard/templates/peer.conf
@@ -0,0 +1,11 @@
+[Interface]
+Address = ${CLIENT_IP}
+PrivateKey = $(cat /config/${PEER_ID}/privatekey-${PEER_ID})
+ListenPort = 51820
+DNS = ${PEERDNS}
+
+[Peer]
+PublicKey = $(cat /config/server/publickey-server)
+PresharedKey = $(cat /config/${PEER_ID}/presharedkey-${PEER_ID})
+Endpoint = ${SERVERURL}:${SERVERPORT}
+AllowedIPs = ${ALLOWEDIPS}
diff --git a/wireguard/wireguard/templates/server.conf b/wireguard/wireguard/templates/server.conf
new file mode 100644
index 0000000..757682d
--- /dev/null
+++ b/wireguard/wireguard/templates/server.conf
@@ -0,0 +1,6 @@
+[Interface]
+Address = ${INTERFACE}.1
+ListenPort = 51820
+PrivateKey = $(cat /config/server/privatekey-server)
+PostUp = iptables -A FORWARD -i %i -j ACCEPT; iptables -A FORWARD -o %i -j ACCEPT; iptables -t nat -A POSTROUTING -o eth+ -j MASQUERADE
+PostDown = iptables -D FORWARD -i %i -j ACCEPT; iptables -D FORWARD -o %i -j ACCEPT; iptables -t nat -D POSTROUTING -o eth+ -j MASQUERADE
diff --git a/wireguard/wireguard/wg_confs/wg0.conf b/wireguard/wireguard/wg_confs/wg0.conf
new file mode 100644
index 0000000..9c1f068
--- /dev/null
+++ b/wireguard/wireguard/wg_confs/wg0.conf
@@ -0,0 +1,25 @@
+[Interface]
+Address = 10.20.0.1
+ListenPort = 51820
+PrivateKey = +FCo3yAN1vvpckw4ndWEgA3WtdG7SjaiiJqCResRVlU=
+PostUp = iptables -A FORWARD -i %i -j ACCEPT; iptables -A FORWARD -o %i -j ACCEPT; iptables -t nat -A POSTROUTING -o eth+ -j MASQUERADE
+PostDown = iptables -D FORWARD -i %i -j ACCEPT; iptables -D FORWARD -o %i -j ACCEPT; iptables -t nat -D POSTROUTING -o eth+ -j MASQUERADE
+
+[Peer]
+# peer1
+PublicKey = c+993PShllBNgnR/phaLym8tTW4QMjbeAmh+67ybxDU=
+PresharedKey = 5WP5+4ZIy6a8ROn/2ZKaYT0m/23sbOHMFvT/euWH/Cw=
+AllowedIPs = 10.20.0.2/32
+
+[Peer]
+# peer2
+PublicKey = mNTq/XTXXZFtyXc7t1uQ9vdcwneU2XkWrWzjPgRe/1E=
+PresharedKey = bJnoOmSwf9tbLt59nMNRdL98CtC+gMLczbqz/6hBJzo=
+AllowedIPs = 10.20.0.3/32
+
+[Peer]
+# peer3
+PublicKey = w34g7tWb9txMZmluL1VdRH4o0UTJWfOjFrZDKOkdFHQ=
+PresharedKey = YLYvms8UHwE2IkF7WgIrDNDisUK4JveacI5EQpAHHUw=
+AllowedIPs = 10.20.0.4/32
+