root@svr:/etc/wireguard# touch svr.wg0.key
root@svr:/etc/wireguard# chmod 600 svr.wg0.key root@svr:/etc/wireguard# wg genkey > svr.wg0.key
root@svr:/etc/wireguard# wg pubkey < svr.wg0.key > svr.wg0.pub
root@cli:/etc/wireguard# touch cli.wg0.key
root@cli:/etc/wireguard# chmod 600 cli.wg0.key root@cli:/etc/wireguard# wg genkey > cli.wg0.key
root@cli:/etc/wireguard# wg pubkey < cli.wg0.key > cli.wg0.pub
private key is private; public key is public =)