diff --git a/resources/wireguard/kestrel.conf b/resources/wireguard/kestrel.conf
new file mode 100644
index 00000000..db4957fa
--- /dev/null
+++ b/resources/wireguard/kestrel.conf
@@ -0,0 +1,10 @@
+[Interface]
+# your own IP on the wireguard network
+Address = 192.168.3.3/24
+PrivateKey = <replace with secret>
+[Peer]
+PublicKey = bd7bbZOngl/FTdBlnbIhgCLNf6yx5X8WjiRB7E1NEQQ=
+# restrict this to the wireguard subnet if you don't want to route everything to the tunnel
+AllowedIPs = 0.0.0.0/0, ::/0
+# ip and port of the peer
+Endpoint = 66.218.43.87:51820