Configurar servidor WireGuard
sudo tee /etc/wireguard/wg0.conf << 'EOF'
[Interface]
Address = 10.0.0.1/24
ListenPort = 51820
PrivateKey = $(sudo cat /etc/wireguard/private.key)

[Peer]
PublicKey = client_public_key_here
AllowedIPs = 10.0.0.2/32
EOF