--- wireguard_if: wg0 wireguard_ext_if: eth0 wireguard_listenport: 51820 wireguard_peers: [] wireguard_ipv4_forward: true wireguard_ipv6_forward: true wireguard_nftables_services_allow: - ssh