with wireguard-go, which is no longer in ports; newer wireguard-tools works with wg(4) in the base OS instead. OK jasper@