give wireguard clients unique IPs

wg.mk

@@ -20,8 +20,11 @@ wgkeys.rec: wireguard/dmz_public_key
 	git commit -m"add wireguard key for $(name)"
 	$(info Remember to git push)
 
-wireguard/dmz.conf: xecut/nimbus/dmz.conf | wireguard/dmz_private_key
-	sed 's/PRIVATE_KEY/$(shell cat $|)/' $< > $@
+wireguard/dmz.conf: wireguard/dmz_bare.conf | wireguard/dmz_private_key
+	sed 's#PRIVATE_KEY#$(shell cat $|)#' $< > $@
+
+wireguard/dmz_bare.conf: wgkeys.rec | xecut/nimbus/dmz.conf
+	recsel $< -t $(basename $<) -e 'name = "$(name)"' | recfmt -f $| > $@
 
 ###### Wireguard configuration #####