# Géré par Ansible — ne pas modifier manuellement
[Interface]
Address = {{ wireguard_server_ip }}/{{ wireguard_subnet.split('/')[1] }}
ListenPort = {{ wireguard_port }}
PrivateKey = {{ vault_wireguard_server_private_key }}

{% for peer in wireguard_peers %}
# {{ peer.name }} — accès {{ peer.access }}
[Peer]
PublicKey = {{ peer.public_key }}
AllowedIPs = {{ peer.ip }}/32

{% endfor %}