[Interface]
PrivateKey = {{ lookup('file', '/etc/wireguard/private.key') }}
ListenPort = {{ kedge_wg_port }}
Address = {{ wg_address | default('10.100.0.1/24') }}

{% for peer in wg_peers | default([]) %}
[Peer]
PublicKey = {{ peer.public_key }}
Endpoint = {{ peer.endpoint }}
AllowedIPs = {{ peer.allowed_ips | join(', ') }}
PersistentKeepalive = 25
{% endfor %}