[Unit]
Description=Configure WireGuard interface
Wants=network-pre.target
Before=network-pre.target nftables.service systemd-networkd.service NetworkManager.service

[Service]
Type=simple
CapabilityBoundingSet=CAP_NET_ADMIN
ExecStartPre=+-/usr/sbin/ip link add %i type wireguard
ExecStartPre=+/usr/bin/wg setconf %i /etc/wireguard/%i.conf
ExecStart=/usr/local/bin/wgconfd %i /etc/wireguard/%i.toml
StandardError=journal
SyslogLevelPrefix=true

[Install]
WantedBy=multi-user.target