[wireguard]
# The name of the wireguard tunnel. Will among other things be used for
# the server config filename.
tunnel_id = some-interface-name

# The directory where all users' configs will be stored.
configs_base = some/writable/directory

# The DNS server to advertise to clients
dns_server = a.dns.server.ip

# The IP address and port a client will connect to
server_address = the.public.tunnel.ip
server_port = 51820

# Server keys
server_pubkey_file = path/to/keyfile
server_privkey_file = path/to/other/keyfile

# The network from which to pick peer addresses
vpn_network = 10.11.12.0/24

# The address of the server inside the tunnel
server_vpn_address = 10.11.12.1

# Any extra configuration directives to include in the config file.
# Optional.
server_extra_config = path/to/a/conf/fragment

[oauth]
authorization_url = https://oauth.example/authorize
token_url = https://oauth.example/exchange
introspection_url = https://oauth.example/verify
client_id = some_id_string
client_secret = some_secret_string