optionally set int.forward=1 via sysctl

pillar.example

         allowed_ips:
           - 10.0.0.3/32
           - 'fdff::3/128'
+
+  # optionally, a list of interfaces can be specified for which forwarding will
+  # be set to 1 via sysctl.present
+  set_forward_interfaces:
+    - all
+    - wgtest

wireguard/init.sls

 {% endif %}
 {% endfor %}
 {% endfor %}
+
+{% for interface in salt['pillar.get']('wireguard:set_forward_interfaces', []) %}
+net.ipv4.conf.{{interface}}.forwarding:
+  sysctl.present:
+    - value: 1
+net.ipv6.conf.{{interface}}.forwarding:
+  sysctl.present:
+    - value: 1
+{% endfor %}