# WireGuard CT (LXC 110, 10.48.200.67) client-server config
# Accepts connections from MediaStack and Jellyfin
# File: /etc/wireguard/wg-clients.conf

[Interface]
Address = 10.200.0.1/24
ListenPort = 51821
PrivateKey = uMdYzpGScR4D8cIm7WNbTJ5KHZQGAIFUInMI+4MZjkU=
PostUp = iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE; sysctl -w net.ipv4.ip_forward=1
PostDown = iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE

[Peer]
# MediaStack (10.48.200.35)
PublicKey = CaG79S1fJeJDlYCMhHz8BrDfizBq+OiGnO5VzFIk3gE=
AllowedIPs = 10.200.0.4/32