wireguard - Exclude single ip

subnets.py

#!/usr/bin/env python
from ipaddress import ip_network
from sys import argv

start = '0.0.0.0/0'
exclude = argv[1:]

result = [ip_network(start)]
for x in exclude:
    n = ip_network(x)
    new = []
    for y in result:
        if y.overlaps(n):
            new.extend(y.address_exclude(n))
        else:
            new.append(y)
    result = new

print(','.join(str(x) for x in sorted(result)))

Thanks to Daniel Lautenbacher

Slighly modified to read exclusion arguments from command line.