docker-wireguard/root/etc/s6-overlay/s6-rc.d/svc-wireguard/finish

#!/usr/bin/with-contenv bash
# shellcheck shell=bash

if [[ -f "/app/activeconfs" ]]; then
    . /app/activeconfs
    for tunnel in $(printf '%s\n' "${WG_CONFS[@]}" | tac | tr '\n' ' '; echo); do
        echo "**** Disabling tunnel ${tunnel} ****"
        wg-quick down "${tunnel}" || :
    done
    echo "**** All tunnels are down ****"
    rm -rf /app/activeconfs
fi