/etc/wireguard/wg0.conf (server config)

[Interface]
Address = 10.0.2.1/32
ListenPort = 51820
PostDown = iptables -D FORWARD -i wg0 -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE
PostUp = iptables -A FORWARD -i wg0 -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
PrivateKey = ***REDACTED***
# PublicKey = dZDM5aWxz79pjxqFgS5+G109r/hjgf2tEO+4rW/AhkE=

PostUp = tc qdisc add dev wg0 parent root handle 1: hfsc default 1
PostUp = tc class add dev wg0 parent 1: classid 1:1 hfsc sc rate 20mbit ul rate 20mbit
PostUp = tc class add dev wg0 parent 1:1 classid 1:3 hfsc ls rate 800kbit ul rate 800kbit
PostUp = tc class add dev wg0 parent 1:1 classid 1:4 hfsc ls rate 800kbit ul rate 800kbit
PostUp = tc class add dev wg0 parent 1:1 classid 1:5 hfsc ls rate 800kbit ul rate 800kbit
***AND SO ON...***
PostUp = tc filter add dev wg0 parent 1: protocol ip prio 1 u32 match ip dst 10.0.2.3 classid 1:3
PostUp = tc filter add dev wg0 parent 1: protocol ip prio 1 u32 match ip dst 10.0.2.4 classid 1:4
PostUp = tc filter add dev wg0 parent 1: protocol ip prio 1 u32 match ip dst 10.0.2.5 classid 1:5
***AND SO ON...***

[Peer]
# Name = alice
AllowedIPs = 10.0.2.3/32
PublicKey = +1aMNpHmJtkeSHJVZKo62TBvqeUmbBgJtokqIXi9ugs=

[Peer]
# Name = bob
AllowedIPs = 10.0.2.4/32
PublicKey = ZzZmMWtLI7h1IBwWsYcLZgIC/2vgE+DyTZTybQItbB8=

[Peer]
# Name = carol
AllowedIPs = 10.0.2.5/32
PublicKey = idSChH9sckbCVY7Z/mMlUTifTnfwxEztamu3FGpy1Uk=

***AND SO ON...***