65535 1 10 left 10 10 10 10 vertical 12 top grid 6 5 6 1 end _Endpoint 1 entry_endpoint 0 0 An endpoint IP or hostname, followed by a colon, and then a port number. 1 1 1 0 end _Public key 1 entry_public_key 0 1 A base64 public key calculated by 'wg pubkey' from a private key. 1 1 dialog-password 0 0 1 1 end _Pre-shared key 1 entry_psk 0 2 A base64 preshared key generated by 'wg genpsk'. Optional, and may be omitted. Adds an additional layer of symmetric-key cryptography to be mixed into the already existing public-key cryptography, for post-quantum resistance. 1 0 1 dialog-password 0 0 1 2 end Allowed _IP addresses 1 entry_allowed_ips 0 3 Comma-separated list of IP (v4 or v6) addresses with CIDR masks from which incoming traffic for this peer is allowed and to which outgoing traffic for this peer is directed. 1 1 1 3 end _Persistent keepalive 1 spin_persistent_keepalive 0 4 6 How often to send an authenticated empty packet to the peer for the purpose of keeping a stateful firewall or NAT mapping valid. This is optional and not recommended outside of specific setups. 1 adjustment_keepalive 1 1 seconds 1 4 1 end 1 Apply