http://arcani5qce7mhpqnemrmj2mv5dx2qjxnfzw5d3vzuvs5bqlzb65nkbyd.onion/notes/crypto.php
Within a WireGuard interface, two endpoints CANNOT share the same network part of an address (AllowedIPs), they must be distinct. For example, you cannot have one side be 10.20.30. 1 /24 and the other as 10.20.30. 2 /24, instead, it should be like 10.20.30 .1/24 and 10.20.31 .1/24.