[Interface]
PrivateKey = <REDACTED>
Address = 198.51.100.1/24
ListenPort = 51820
PostUp = iptables -I FORWARD 1 -o %i -d 198.51.100.2/32 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
PostUp = iptables -I FORWARD 2 -i %i -s 198.51.100.2/32 -d 192.168.0.0/24 -j ACCEPT
PostUp = iptables -I FORWARD 3 -i %i -d 192.168.0.0/24 -j REJECT --reject-with icmp-port-unreachable
PostUp = iptables -t nat -A POSTROUTING -s 198.51.100.0/24 -o enp37s0 -j MASQUERADE

PostDown = iptables -D FORWARD -o %i -d 198.51.100.2/32 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
PostDown = iptables -D FORWARD -i %i -s 198.51.100.2/32 -d 192.168.0.0/24 -j ACCEPT
PostDown = iptables -D FORWARD -i %i -d 192.168.0.0/24 -j REJECT --reject-with icmp-port-unreachable
PostDown = iptables -t nat -D POSTROUTING -s 198.51.100.0/24 -o enp37s0 -j MASQUERADE

# BEGIN ANSIBLE MANAGED BLOCK FOR salman
[Peer]
PublicKey = <REDACTED>
AllowedIPs = 198.51.100.2/32
# END ANSIBLE MANAGED BLOCK FOR salman