network:
  renderer: NetworkManager
  version: 2
  tunnels:
    wg0:
      mode: wireguard
      addresses:
        - 10.10.10.102/32
      key: <private key> 
      peers:
      - keys:
          public: <public key of peer>
        endpoint: <hostname>:<port>
        allowed-ips: [10.10.10.0/24]