server.conf

$ cat  /etc/systemd/system/wireguard.service

[Unit]
Description=WireGuard Server

[Service]
Type=oneshot
RemainAfterExit=yes
ExecStart=/bin/ip link add dev wg0 type wireguard
ExecStart=/bin/ip address add fc00::10/7 dev wg0
ExecStart=/usr/bin/wg setconf wg0 /etc/wireguard/server.conf
ExecStart=/bin/ip link set up dev wg0
ExecStop=/bin/ip link del dev wg0

[Install]
WantedBy=multi-user.target



$ cat /etc/wireguard/server.conf

[Interface]
PrivateKey = 4IQ6ra***BloF0E=
ListenPort = 40111

[Peer]
PublicKey = vWjIpwbIZD***4gR2zQE=
AllowedIPs = fc00::20/7



$ ip a

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: ens3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 00:50:56:00:7b:1e brd ff:ff:ff:ff:ff:ff
    inet 5.9.***.**7/24 brd 5.9.***.255 scope global ens3
       valid_lft forever preferred_lft forever
    inet6 2a01:4f8:***:***::5/64 scope global
       valid_lft forever preferred_lft forever
    inet6 fe80::25**:****:**00:7b1e/64 scope link
       valid_lft forever preferred_lft forever
39: wg0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1423 qdisc noqueue state UNKNOWN group default qlen 1
    link/none
    inet6 fc00::10/7 scope global
       valid_lft forever preferred_lft forever
    inet6 fe80::57**:****:**d7:e44b/64 scope link flags 800
       valid_lft forever preferred_lft forever



$ ip route

default via 5.9.***.**3 dev ens3
5.9.***.0/24 dev ens3  proto kernel  scope link  src 5.9.***.**7