| fwmark | uint32 | 0 | The use of fwmark is optional and is by default off. Setting it to 0 disables it. Otherwise it is a 32-bit fwmark for outgoing packets. | 
| listen-port | uint32 | 0 | The listen-port. If listen-port is not specified, the port will be chosen randomly when the interface comes up. | 
| mtu | uint32 | 0 | If non-zero, only transmit packets of the specified size or smaller, breaking larger packets up into multiple fragments. If zero a default MTU is used. Note that contrary to wg-quick's MTU setting, this does not take into account the current routes at the time of activation. | 
| peer-routes | boolean | TRUE | Whether to automatically add routes for the AllowedIPs ranges of the peers. If TRUE (the default), NetworkManager will automatically add routes in the routing tables according to ipv4.route-table and ipv6.route-table. If FALSE, no such routes are added automatically. In this case, the user may want to configure static routes in ipv4.routes and ipv6.routes, respectively. | 
| peers | array of 'a{sv}' |  | Array of dictionaries for the WireGuard peers. | 
| private-key | string |  | The 256 bit private-key in base64 encoding. | 
| private-key-flags | NMSettingSecretFlags (uint32) |  | Flags indicating how to handle the "private-key" property. |