# WireGuard Server Configuration - Multi-Client Support
# This template supports multiple devices (client1, client2, client3)
# Each client must have unique keys and unique IP addresses

[Interface]
# Server's private key (keep this secret!)
PrivateKey = <SERVER_PRIVATE_KEY>
# Server's VPN network address
Address = 10.0.0.1/24
# Listen port for incoming connections
ListenPort = 51820
# Optimize MTU for better performance (1300 conservative, 1420 optimal)
PostUp = ip link set dev wg0 mtu 1420

# === CLIENT 1 (Original/Legacy) ===
[Peer]
PublicKey = <CLIENT1_PUBLIC_KEY>
# Unique IP for this client only
AllowedIPs = 10.0.0.2/32
# Optional: known endpoint if client has static IP
# Endpoint = <CLIENT1_PUBLIC_IP>:<CLIENT1_PORT>
PersistentKeepalive = 25

# === CLIENT 2 (New Device) ===
[Peer]
PublicKey = <CLIENT2_PUBLIC_KEY>
# Unique IP for this client only
AllowedIPs = 10.0.0.3/32
PersistentKeepalive = 25

# === CLIENT 3 (New Device) ===
[Peer]
PublicKey = <CLIENT3_PUBLIC_KEY>
# Unique IP for this client only
AllowedIPs = 10.0.0.4/32
PersistentKeepalive = 25

# === ADD MORE CLIENTS BY COPYING THE PEER BLOCK ===
# Increment IP address (10.0.0.5, 10.0.0.6, etc.)
# Each MUST have a unique public key and IP