# WireGuard Sample Hosts File
#
# Hierarchy uses <Entity>.<Domain> — Domain becomes a grouping header so
# each peer's outer (encrypted UDP) and inner (decrypted) faces sit
# side-by-side under one banner. This makes the tunneling structure
# immediately readable: "Outer" and "Inner" rows belong to the same peer.

# WG-Client peer — initiator (outer + decrypted tunnel interface)
10.9.0.1    🔒 Outer.WG-Client
10.10.0.2   🔓 Inner.WG-Client

# WG-Server peer — responder (outer + decrypted tunnel interface)
10.9.0.2    🔒 Outer.WG-Server
10.10.0.1   🔓 Inner.WG-Server

# External destinations reached over the decrypted tunnel
1.1.1.1           ☁ Cloudflare-DNS.Internet
178.21.112.251    🌍 lekensteyn.nl.Internet
