[Interface]
PrivateKey = {{ item.1.content | b64decode | trim }}
Address = {{ item.0.address }}/32
DNS = {{ wireguard_dns }}

[Peer]
PublicKey = {{ wg_server_pubkey.stdout }}
Endpoint = {{ wireguard_remote_address }}:{{ wireguard_port }}
AllowedIPs = {{ item.0.allowed_ips }}
PersistentKeepalive = 25