-Sometimes it is useful to have information on the current runtime state of a tunnel. When using the Linux kernel module on a kernel that supports dynamic debugging, debugging information can be written into
+Sometimes it is useful to have information on the current runtime state
+of a tunnel.
+Debugging information can be written into
+.Xr dmesg 8
on a per-interface basis by using
-.BR ifconfig (1):
-
-\fB # ifconfig wg0 debug
-
-On userspace implementations, it is customary to set the \fILOG_LEVEL\fP environment variable to \fIverbose\fP.
-
-.SH ENVIRONMENT VARIABLES
-.TP
-.I WG_COLOR_MODE
-If set to \fIalways\fP, always print ANSI colorized output. If set to \fInever\fP, never print ANSI colorized output. If set to \fIauto\fP, something invalid, or unset, then print ANSI colorized output only when writing to a TTY.
-.TP
-.I WG_HIDE_KEYS
-If set to \fInever\fP, then the pretty-printing \fBshow\fP sub-command will show private and preshared keys in the output. If set to \fIalways\fP, something invalid, or unset, then private and preshared keys will be printed as "(hidden)".
-.TP
-.I WG_ENDPOINT_RESOLUTION_RETRIES
-If set to an integer or to \fIinfinity\fP, DNS resolution for each peer's endpoint will be retried that many times for non-permanent errors, with an increasing delay between retries. If unset, the default is 15 retries.
-
-.SH SEE ALSO
-.BR wg-quick (8),
-.BR ip (8),
-.BR ip-link (8),
-.BR ip-address (8),
-.BR ip-route (8).
-
-.SH AUTHOR
-.B wg
-was written by
-.MT Jason@zx2c4.com
-Jason A. Donenfeld
-.ME .
-For updates and more information, a project page is available on the
-.UR https://\:www.wireguard.com/
-World Wide Web
-.UE .
+.Xr ifconfig 8 :
+.Bd -literal -offset indent
+# ifconfig wg0 debug
+.Ed
+.Pp
+On userspace implementations, it is customary to set the
+.Ar LOG_LEVEL
+environment variable to
+.Ar verbose .
+.Sh ENVIRONMENT
+The following environment variables affect the execution of
+.Nm :
+.Bl -tag -width WG_ENDPOINT_RESOLUTION_RETRIES
+.It Ev WG_COLOR_MODE
+If set to
+.Ar always ,
+always print ANSI colorized output.
+If set to
+.Ar never ,
+never print ANSI colorized output.
+If set to
+.Ar auto ,
+something invalid, or unset, then print ANSI
+colorized output only when writing to a TTY.
+.It Ev WG_HIDE_KEYS
+If set to
+.Ar never ,
+then the pretty-printing
+.Ar show
+sub-command will show private and preshared keys in the output.
+If set to
+.Ar always ,
+something invalid, or unset, then private and preshared keys will be printed
+as "(hidden)".
+.It Ev WG_ENDPOINT_RESOLUTION_RETRIES
+If set to an integer or to
+.Ar infinity ,
+DNS resolution for each peer's endpoint will be retried that many times for
+non-permanent errors, with an increasing delay between retries.