diff --git a/roles/wireguard/vars/main.yml b/roles/wireguard/vars/main.yml
index f69deac..2887461 100644
--- a/roles/wireguard/vars/main.yml
+++ b/roles/wireguard/vars/main.yml
@@ -1,10 +1,10 @@
 wireguard_interfaces:
   - name: home
-    address: "10.225.191.4/24, fd11:5ee:bad:c0de::4/64"
-    dns: "192.168.10.1"
+    always: true
+    address: "10.225.191.4/24"
     peer_public_key: "fa3mQ7ximJbH7cu2ZbWidto5xBGxEEfWvCCiUDk00Hg="
     endpoint: "84.245.14.149:51820"
-    allowed_ips: "0.0.0.0/0, ::0/0"
+    allowed_ips: "10.225.191.4/24,192.168.10.0/24,192.168.20.0/24,192.168.40.0/24"
     preshared_key: !vault |
       $ANSIBLE_VAULT;1.1;AES256
       30323832316230326261663365363938306161623639643261376164373563346665643261656632
@@ -35,3 +35,18 @@ wireguard_interfaces:
       3162366232656534630a636639626134343638316665306362396363363034616163616662326136
       62363632393536356562306562366431383962646330353035323137613865333636356663363763
       6137333432336533646534656437633539633065663931643633
+  - name: carwash
+    always: true
+    address: "192.168.30.129/32"
+    peer_public_key: "5D/Wg2tsEY7t0TN5iSEQTU/rT77ANfG1p76y3ZIHIFs="
+    endpoint: "carwash.pim.kunis.nl:11946"
+    allowed_ips: "192.168.30.0/24,0.0.0.0/0"
+    dns: "192.168.30.128"
+    private_key: !vault |
+      $ANSIBLE_VAULT;1.1;AES256
+      39396361643039633361303266326166376236626430336534303330373766303063373839643031
+      6561323836616535323931643335313438306338396264360a653830353237396665373436316466
+      35353063646263353163303836383762313034653563663634613139303136323739626334313232
+      3162366232656534630a636639626134343638316665306362396363363034616163616662326136
+      62363632393536356562306562366431383962646330353035323137613865333636356663363763
+      6137333432336533646534656437633539633065663931643633