# Example WireGuard config for the Raspberry Pi side of the VPS <-> Pi
# storage link — see docs/PROJECT_PLAN.md §50. Copy to /etc/wireguard/wg0.conf
# on the Pi, fill in the real private key and the VPS's public IP/domain,
# and restrict permissions (chmod 600). The Pi initiates the tunnel
# outbound (PersistentKeepalive) so it never needs inbound Internet access
# or a public IP of its own — see §50 rule 3.
[Interface]
PrivateKey = <pi-private-key-from-generate-keys.sh>
Address = 10.8.0.2/24

[Peer]
# VPS
PublicKey = <vps-public-key>
Endpoint = <vps-public-ip-or-domain>:51820
AllowedIPs = 10.8.0.1/32
PersistentKeepalive = 25