  wg_private_key="$(wg genkey)"
  wg_public_key="$(echo "$wg_private_key" | wg pubkey)"
  echo "PrivateKey: $wg_private_key"
  echo "PublicKey: $wg_public_key"
  echo "PresharedKey: $(wg genpsk)"

See

https://golb.hplar.ch/2019/01/expose-server-vpn.html
https://wiki.archlinux.org/index.php/WireGuard
https://wireguard.how/server/raspbian/
https://www.scaleuptech.com/de/blog/was-ist-und-wie-funktioniert-subnetting/
https://bodhilinux.boards.net/thread/450/wireguard-rtnetlink-answers-permission-denied
https://stackoverflow.com/questions/69140072/unable-to-ssh-into-wireguard-ip-until-i-ping-another-server-from-inside-the-serv
https://unix.stackexchange.com/questions/717172/why-is-ufw-blocking-acces-to-ssh-via-wireguard
https://forum.openwrt.org/t/cannot-ssh-to-clients-on-lan-when-accessing-router-via-wireguard-client/132709/3
https://serverfault.com/questions/1086297/wireguard-connection-dies-on-ubuntu-peer