sudo pacman -S wireguard-tools
wg genkey | tee privatekey | wg pubkey > publickey wg genpsk
vim /etc/wireguard/wg0.conf
[Interface] Address = $wireguard_address PostUp = iptables -A FORWARD -i wg0 -j ACCEPT; iptables -t nat -A POSTROUTING -o $interface -j MASQUERADE; PostDown = iptables -D FORWARD -i wg0 -j ACCEPT; iptables -t nat -D POSTROUTING -o $interface -j MASQUERADE; ListenPort = $port PrivateKey = $key [Peer] PublicKey = $peer_public_key AllowedIPs = $peer_wireguard_address, $remote_subnet Endpoint = $peer_public_ip:$peer_port PresharedKey = $prehared_key
wg-quick up $interface