diff --git a/wg.mk b/wg.mk
index dcf33fa..c4f89f8 100644
--- a/wg.mk
+++ b/wg.mk
@@ -22,3 +22,8 @@ wgkeys.rec: wireguard/dmz_public_key
 
 wireguard/dmz.conf: xecut/nimbus/dmz.conf | wireguard/dmz_private_key
 	sed 's/PRIVATE_KEY/$(shell cat $|)/' $< > $@
+
+###### Wireguard configuration #####
+
+wireguard/wg_peers.txt: wgkeys.rec | xecut/nimbus/wireguard_server.fmt
+	recsel $< -t $(basename $<) | recfmt -f $| > $@
diff --git a/xecut/nimbus/wg_peer.fmt b/xecut/nimbus/wg_peer.fmt
new file mode 100644
index 0000000..364ade3
--- /dev/null
+++ b/xecut/nimbus/wg_peer.fmt
@@ -0,0 +1,4 @@
+[Peer]
+PublicKey = {{pubkey}}
+AllowedIPs = 10.0.0.2/32
+