umask go=

wg genkey | tee wgserver.key | wg pubkey > wgserver.pub

wg genkey | tee wgclient.key | wg pubkey > wgclient.pub

wg genpsk > wgclient.psk

uci del_list firewall.wan.network="vpn"

uci add_list firewall.wan.network="vpn"

uci commit firewall

/etc/init.d/firewall

 uci -q delete network.vpn
 uci set network.vpn="interface"
 uci set network.vpn.proto="wireguard"
 uci set network.vpn.private_key="{VPN_KEY}"
 uci add_list network.vpn.addresses="{VPN_ADDRESS}"

 uci -q delete network.wgserver
 uci set network.wgserver="wireguard_vpn"
 uci set network.wgserver.public_key="{VPN_PUB}"
 uci set network.wgserver.endpoint_host="{VPN_SERVER}"
 uci set network.wgserver.preshared_key="{VPN_PSK}"
 uci set network.wgserver.endpoint_port="{VPN_PORT}"
 uci set network.wgserver.persistent_keepalive="25"
 uci set network.wgserver.route_allowed_ips="1"
 uci add_list network.wgserver.allowed_ips="0.0.0.0/0"
 uci add_list network.wgserver.allowed_ips="::/0"
 uci commit network

/etc/init.d/network reload