---
# wireguard_gateway_tunnels:
#   wg-test:
#     description: some wireguard tunnel
#     priv_key: secret
#     listen_port: 1234
#     addresses:
#     - 192.168.255.254/24
#     ip_masq: yes
#     ip_snat:
#       interface: eth1
#       to: 1.2.3.4
#     port_forwardings:
#     - dest: 1.2.3.4
#       tcp_ports:
#         80: 192.158.255.3:80
#       udp_ports:
#         123: 192.158.255.3:200
#     peers:
#     - pub_key: public_key_of_peer
#       keepalive_interval: 10
#       endpoint:
#         host: 5.6.7.8
#         port: 1234
#       allowed_ips:
#         - 192.168.255.3/32
#         - 192.168.123.0/24