wgconf

type Conf struct {
	Interface Interface
	Peers     []Peer `ini:"Peer,omitempty,allowshadow"`
}

type Interface struct {
	// Comment in INI syntax used to help keep track of which config
	// section belongs to which node, it's completely ignored by WireGuard
	// and has no effect on VPN behavior.
	Name string `ini:",ignore"`
	// Defines what address range the local node should route traffic for.
	Address string `ini:",omitempty"`
	// When the node is acting as a public bounce server, it should hardcode
	// a port to listen for incoming VPN connections from the public internet.
	// Clients not acting as relays should not set this value.
	ListenPort uint16 `ini:",omitempty"`
	// This is the private key for the local node, never shared with other servers.
	// All nodes must have a private key set.
	PrivateKey string
	// A shared secret key between all peers. If this is configured, then all peers
	// must have it. Should be randomly generated 32 byte number, base64 encoded.
	// May be generated with same function as PrivateKey
	PresharedKey string `ini:",omitempty"`
	// The DNS server(s) to announce to VPN clients via DHCP,
	// most clients will use this server for DNS requests over the VPN,
	// but clients can also override this value locally on their nodes
	DNS string `ini:",omitempty"`
	// Optionally run a command before the interface is brought up.
	// This option can be specified multiple times, with commands executed in order.
	PreUp []string `ini:",omitempty,allowshadow"`
	// Optionally run a command after the interface is brought up.
	// This option can appear multiple times, as with PreUp.
	PostUp []string `ini:",omitempty,allowshadow"`
	// Optionally run a command before the interface is brought down.
	// This option can appear multiple times, as with PreUp.
	PreDown []string `ini:",omitempty,allowshadow"`
	// Optionally run a command after the interface is brought down.
	// This option can appear multiple times, as with PreUp.
	PostDown []string `ini:",omitempty,allowshadow"`
}

type Peer struct {
	// Comment in INI syntax used to help keep track of which config
	// section belongs to which node, it's completely ignored by WireGuard
	// and has no effect on VPN behavior.
	Name string `ini:",omitempty"`
	// Defines the publicly accessible address for a remote peer.
	EndPoint string `ini:",omitempty"`
	// The Ip ranges for which  a peer will route traffic
	AllowedIPs string `ini:",omitempty"`
	// This is the public key for the remote node, shareable with all peers.
	PublicKey string
	// A shared secret key between all peers. If this is configured, then all peers
	// must have it. Should be randomly generated 32 byte number, base64 encoded.
	// May be generated with same function as PrivateKey
	PresharedKey string `ini:",omitempty"`
	// How many seconds between outgoing pings to send to the peer.
	// Keeps bidirectional connections alive in the NAT router's connection table.
	PersistentKeepalive int `ini:",omitempty"`
}