# The home end of the tunnel to the instance's server (ADR 0032), copied to
# wireguard/wg_confs/wg0.conf (git-ignored) with its two keys filled in. Setting it up:
# ../sidecars/README.md, *Jellyfin at home*.

[Interface]
Address = 10.61.96.2/32
PrivateKey = <the home end's private key>

[Peer]
PublicKey = <the instance's public key>
Endpoint = learn.halkyon.eu:51820
# The instance's end alone, through which Caddy's requests come (masqueraded by Docker
# on the instance's server): nothing else of the internet goes through the tunnel.
AllowedIPs = 10.61.96.1/32
# Dialling out keeps the way open through the router and brings the tunnel back within
# 25 s after the machine wakes (D10).
PersistentKeepalive = 25