ansible-roles/vpn/wireguard/templates/server/IFACE.conf

[Interface]
PrivateKey = {{ vpn_wireguard_interface_private_key }}
ListenPort = {{ vpn_wireguard_port }}
{% for client in vpn_wireguard_clients %}

[Peer]
PublicKey = {{ client.public_key }}
PresharedKey = {{ client.preshared_key }}
{% if 'subnet' in client %}
AllowedIPs = {{ vpn_wireguard_subnet }},{{ client.subnet }}
{% else %}
AllowedIPs = {{ vpn_wireguard_subnet }}
{% endif %}
{% endfor %}