wg-aws/roles/wireguard_server/templates/wg0.conf

[Interface]
Address = {{ vpn_network }}.1/24
SaveConfig = false
ListenPort = {{ vpn_port }}
PrivateKey = {{ vpn_server_private_key.stdout }}
PostUp = iptables -A FORWARD -i wg0 -j ACCEPT; iptables -t nat -A POSTROUTING -o ens5 -j MASQUERADE; ip6tables -A FORWARD -i wg0 -j ACCEPT; ip6tables -t nat -A POSTROUTING -o ens5 -j MASQUERADE
PostDown = iptables -D FORWARD -i wg0 -j ACCEPT; iptables -t nat -D POSTROUTING -o ens5 -j MASQUERADE; ip6tables -D FORWARD -i wg0 -j ACCEPT; ip6tables -t nat -D POSTROUTING -o ens5 -j MASQUERADE

{% for i in range(vpn_client_public_keys.results|int) %}
[Peer]
PublicKey = {{ vpn_client_public_keys.results[i].stdout }}
AllowedIPs = {{ vpn_network }}.{{ i + 2 }}/32

{% endfor %}