GNU nano 7.2                                                                   /etc/wireguard/wg0.conf
[Interface]
Address = 192.168.100.1/24
SaveConfig = true
PostUp = sysctl -w net.ipv4.ip_forward=1
PostUp = iptables -A FORWARD -i wg0 -j ACCEPT
PostUp = iptables -t nat -A POSTROUTING -o ens3 -j MASQUERADE
PostUp = iptables -t nat -A PREROUTING -p udp --dport 3478 -j DNAT --to-destination 192.168.100.2:3478
PostUp = iptables -A FORWARD -p udp -d 192.168.100.2 --dport 3478 -j ACCEPT
PostUp = iptables -t nat -A PREROUTING -p udp --dport 16384:32768 -j DNAT --to-destination 192.168.100.2
PostUp = iptables -A FORWARD -p udp -d 192.168.100.2 --dport 16384:32768 -j ACCEPT
PostDown = iptables -D FORWARD -i wg0 -j ACCEPT
PostDown = iptables -t nat -D POSTROUTING -o ens3 -j MASQUERADE
PostDown = iptables -t nat -D PREROUTING -p udp --dport 3478 -j DNAT --to-destination 192.168.100.2:3478
PostDown = iptables -D FORWARD -p udp -d 192.168.100.2 --dport 3478 -j ACCEPT
PostDown = iptables -t nat -D PREROUTING -p udp --dport 16384:32768 -j DNAT --to-destination 192.168.100.2
PostDown = iptables -D FORWARD -p udp -d 192.168.100.2 --dport 16384:32768 -j ACCEPT
ListenPort = 51820
PrivateKey = XXXX

[Peer]
PublicKey = XXXXX
AllowedIPs = 192.168.100.2/32