set interface ethernet eth2 address 10.0.2.254/24
set interface ethernet eth1 address 198.51.100.2/24

set interfaces wireguard wg01 private-key 'KLwG5GzdqiJUY7eAE8yQGHL9CpyIWK6HhwrVJ1l0SV8='
set interfaces wireguard wg01 address 192.168.0.2/24
set interfaces wireguard wg01 description 'VPN-to-central'
set interfaces wireguard wg01 peer central allowed-ips 10.0.1.0/24
set interfaces wireguard wg01 peer central allowed-ips 192.168.0.0/24
set interfaces wireguard wg01 peer central address 198.51.100.1
set interfaces wireguard wg01 peer central port 51820
set interfaces wireguard wg01 peer central public-key 'VUG4uTYvuQnO7QVj52VPFKsFh2D/8ps1J9IeQtErbXc='
set interfaces wireguard wg01 port 51820

set protocols static route 10.0.1.0/24 interface wg01