WireGuard Selective Routing HOWTO doesn't explain enough

[frozen]

Hello, the guide here https://wiki.opnsense.org/manual/how-tos/wireguard-selective-routing.html is really terrible

It completely omits the fact that your downloaded config file from the VPN provider only provides 2 keys, when the whole process requires 4 keys?

Inside the Wireguard -> Peers place, it asks for a Public and Private key

And then inside Instances, it asks the same

Yet my config file only contains 2 keys?

[Interface]
PrivateKey = xxx
Address = 10.0.110.118/32, 2a0e:1c80:1337:1:10:0:110:118/128
DNS = 10.0.0.1, 2a0e:1c80:1337:1:10:0:0:1, 91.231.153.2

[Peer]
PublicKey = yyy
AllowedIPs = 0.0.0.0/0, ::/0
Endpoint = ca-tor.azirevpn.net:51820

So what gives?

Where do I insert [Peer] PublicKey and where do I insert [Interface] PrivateKey ?

I've tried a bunch of combinations so far and I can't get the handshake

Why does the HOWTO completely omit the fact there's 4 fields required when the config only provides two?

You should be instructing people which key goes where.  This is ridiculous.

[Bob.Dig]

This is ridiculous.

Do your learning how WireGuard works in general and then come back to lament again.

[frozen]

I've tried..  And, well, the average joe who is just a novice like myself will encounter this issue again.  You can either continue to tell people that, or you can address it in the documentation -- if you enjoy the former then no problem!

Thanks anyways