---

#!/usr/sbin/nft -f

flush ruleset

table inet nat {
    chain postrouting {
        type nat hook postrouting priority 100; policy accept;
        oifname "enp0s3" masquerade
    }
}

table inet filter {
    chain forward {
        type filter hook forward priority 0; policy accept;
        iifname "wg0" accept
        oifname "wg0" accept
        iifname "wg0" oifname "enp0s3" accept
        oifname "wg0" iifname "enp0s3" accept
    }
}