ansible-roles/vpn/wireguard/templates/client/IFACE

auto {{ vpn_wireguard_iface }}
iface {{ vpn_wireguard_iface }} inet6 static
    pre-up /usr/local/sbin/ip-link-add.sh $IFACE type wireguard
    pre-up wg setconf $IFACE /etc/wireguard/$IFACE.conf

    post-up /usr/local/sbin/post-up-$IFACE-inet.nft
    post-up ip -6 route add default dev $IFACE table {{ vpn_wireguard_routing_table }}

    pre-down ip -6 route del default dev $IFACE table {{ vpn_wireguard_routing_table }}
    pre-down /usr/local/sbin/pre-down-$IFACE-inet.nft

    mtu {{ vpn_wireguard_mtu }}

    address {{ vpn_wireguard_inet6_address }}/{{ vpn_wireguard_inet6_prefixlen }}

iface {{ vpn_wireguard_iface }} inet static
    post-up ip route add default dev $IFACE table {{ vpn_wireguard_routing_table }}

    pre-down ip route del default dev $IFACE table {{ vpn_wireguard_routing_table }}

    address {{ vpn_wireguard_inet_address }}/{{ vpn_wireguard_inet_prefixlen }}