ansible-edda/playbooks/vpn/roles/wireguard/templates/post-up-wg0-inet.nft.j2

#!/usr/bin/env -S nft -f

table inet wg0_inet {
        chain forward {
                type filter hook forward priority 0;
                iif wg0 tcp flags syn tcp option maxseg size set rt mtu;
                oif wg0 tcp flags syn tcp option maxseg size set rt mtu;
        }
}