[Interface]
Address = 10.0.0.1/24         # Private IP for the VPS in the VPN network
ListenPort = 51820            # Default WireGuard port
PrivateKey = ###PRIVATE KEY FOR PUBLIC SERVER####

# packet forwarding
PreUp = sysctl -w net.ipv4.ip_forward=1

# port forwarding (HTTP, HTTPS) - update port list as required 
PreUp = iptables -t nat -A PREROUTING -i eth0 -p tcp -m multiport --dports 80,443 -j DNAT --to-destination 10.0.0.2
PostDown = iptables -t nat -D PREROUTING -i eth0 -p tcp -m multiport --dports 80,443 -j DNAT --to-destination 10.0.0.2

[Peer]
PublicKey = ###PUBLIC KEY FOR PRIVATE SERVER####
AllowedIPs = 10.0.0.2/32      # IP of the home server in VPN