# EXOSYS — Client to head (union.arquolab.io) via wg-quick
# Fill in: PrivateKey, VPS_PUBLIC_KEY, and adjust Address if needed.

[Interface]
# Host WireGuard address (adjust if your assigned address differs)
Address = 10.44.0.1/24
# Base64 private key of THIS host
PrivateKey = REPLACE_WITH_BASE64_PRIVATE_KEY
# Optional listen port (can be omitted). Keep if you expect inbound peer handshakes.
ListenPort = 32237
# MTU optional; WireGuard auto-chooses if omitted
# MTU = 1420

# No NAT rules here; Fedora is an endpoint. Uncomment only if you need to route third-party LANs via wg.
# PostUp   = /usr/sbin/iptables -t nat -A POSTROUTING -o eno8303 -j MASQUERADE
# PostDown = /usr/sbin/iptables -t nat -D POSTROUTING -o eno8303 -j MASQUERADE

# Cloud head (VPS‑GW). Route remote /32 peers through it.
[Peer]
# Public key of VPS‑GW (cloud head)
PublicKey = REPLACE_WITH_VPS_PUBLIC_KEY
# You may substitute the DNS name with a static IP if boot‑time DNS is unreliable
Endpoint = union.arquolab.io:32237
PersistentKeepalive = 25
# Remote peers reachable via the head (add or adjust as needed)
AllowedIPs = 10.44.99.3/32, 10.44.99.4/32, 10.44.99.7/32, 10.44.99.9/32