WireGuard - Revision history

M at 13:28, 11 December 2024

2024-12-11T13:28:57Z

← Older revision		Revision as of 13:28, 11 December 2024
Line 327:		Line 327:

	I'm going to switch to using the DNS port (53) and retrying. I wiped wireguard to try tailscale, so we need to redo it all again.		I'm going to switch to using the DNS port (53) and retrying. I wiped wireguard to try tailscale, so we need to redo it all again.

			<pre>
			🌵 m@bitpost [~/apps/Wireguard] sudo ./wireguard-install.sh
			Welcome to the WireGuard installer!
			The git repository is available at: https://github.com/angristan/wireguard-install

			I need to ask you a few questions before starting the setup.
			You can keep the default options and just press enter if you are ok with them.

			IPv4 or IPv6 public address: 136.47.226.130
			Public interface: enp10s0f0
			WireGuard interface name: wg0
			Server WireGuard IPv4: 192.168.22.199
			Server WireGuard IPv6: fd42:42:42::1
			Server WireGuard port [1-65535]: 53
			First DNS resolver to use for the clients: 192.168.22.1
			Second DNS resolver to use for the clients (optional): 1.1.1.1

			WireGuard uses a parameter called AllowedIPs to determine what is routed over the VPN.
			Allowed IPs list for generated clients (leave default to route everything): 0.0.0.0/0

			Okay, that was all I needed. We are ready to setup your WireGuard server now.
			You will be able to generate a client at the end of the installation.
			Press any key to continue...
			</pre>

2024-12-11T13:25:15Z

← Older revision		Revision as of 13:25, 11 December 2024
Line 323:		Line 323:

	Next we need to open UDP traffic on our port. Do it in stronger_firewall.		Next we need to open UDP traffic on our port. Do it in stronger_firewall.

			Welll I can't ping... i wonder if that port is just not going through the hotspot...?

			I'm going to switch to using the DNS port (53) and retrying. I wiped wireguard to try tailscale, so we need to redo it all again.

2024-12-10T14:29:39Z

← Older revision		Revision as of 14:29, 10 December 2024
Line 1:		Line 1:
	Wireguard is loved FOSS software that is simpler and smaller and WAY FASTER than OpenVPN so, let's have at it.		Wireguard is loved FOSS software that is simpler and smaller and WAY FASTER than OpenVPN so, let's have at it.

			== Configuration ==
			All client configs are here:
			/home/m/apps/Wireguard
			All server configs are here:
			sudo su -
			cd /etc/wireguard

	== Status ==		== Status ==

2024-12-10T14:11:46Z

Installation

← Older revision		Revision as of 14:11, 10 December 2024
Line 19:		Line 19:

	== Installation ==		== Installation ==
	Simplest installation can be done with this script. I'm tired and not sure why there is not a dedicated PPA as the version baked into Ubuntu is f'in old... so let's just try this...		Simplest installation can be done with [https://github.com/angristan/wireguard-install this script]. I'm tired and not sure why there is not a dedicated PPA as the version baked into Ubuntu is f'in old... so let's just try this...
	curl -O https://raw.githubusercontent.com/angristan/wireguard-install/master/wireguard-install.sh		curl -O https://raw.githubusercontent.com/angristan/wireguard-install/master/wireguard-install.sh
	chmod +x wireguard-install.sh		chmod +x wireguard-install.sh

2024-12-10T14:11:06Z

Adding a client

← Older revision		Revision as of 14:11, 10 December 2024
Line 8:		Line 8:

	== Adding a client ==		== Adding a client ==

			[https://youtu.be/bVKNSf1p1d0?si=tM4qQt8SYkX9zaKP Here] is an excellent youtube overview.

	=== Android ===		=== Android ===
	* On the server, generate a client keypair using the script tool		* On the server, generate a client keypair using the script tool

2024-12-10T13:32:35Z

← Older revision		Revision as of 13:32, 10 December 2024
Line 6:		Line 6:
	Systemd journal log:		Systemd journal log:
	journalctl -xeu wg-quick@wg0.service		journalctl -xeu wg-quick@wg0.service

			== Adding a client ==
			=== Android ===
			* On the server, generate a client keypair using the script tool
			* Keep the server QR code handy, it apparently contains everything the client will need, once you add the client key (!!)
			* On the phone, download the wireguard android app, and add the server connection via the QR code

			That's it? Really? Then I can use the hotspot from the laptop? Reallly??

	== Installation ==		== Installation ==

2024-12-10T13:08:22Z

← Older revision		Revision as of 13:08, 10 December 2024
Line 1:		Line 1:
	Wireguard is loved FOSS software that is simpler and smaller and WAY FASTER than OpenVPN so, let's have at it.		Wireguard is loved FOSS software that is simpler and smaller and WAY FASTER than OpenVPN so, let's have at it.

			== Status ==
			Service:
			systemctl status wg-quick@wg0.service
			Systemd journal log:
			journalctl -xeu wg-quick@wg0.service

	== Installation ==		== Installation ==

2024-12-10T12:22:18Z

Installation

← Older revision		Revision as of 12:22, 10 December 2024
Line 151:		Line 151:
	Server WireGuard IPv6: 2022:db8:1234:0000:0000:0000:0000:0001		Server WireGuard IPv6: 2022:db8:1234:0000:0000:0000:0000:0001
	Server WireGuard IPv6: fd42:42:42::1		Server WireGuard IPv6: fd42:42:42::1
	Server WireGuard port [1-65535]: ~~53418~~		Server WireGuard port [1-65535]: (readacted by me)
	First DNS resolver to use for the clients: 192.168.22.1		First DNS resolver to use for the clients: 192.168.22.1
	Second DNS resolver to use for the clients (optional): 1.1.1.1		Second DNS resolver to use for the clients (optional): 1.1.1.1
Line 291:		Line 291:
	public key: (readacted by me)		public key: (readacted by me)
	private key: (hidden)		private key: (hidden)
	listening port: ~~53418~~		listening port: (readacted by me)

	peer: (readacted by me)		peer: (readacted by me)
Line 297:		Line 297:
	allowed ips: 192.168.22.1/32, fd42:42:42::1/128		allowed ips: 192.168.22.1/32, fd42:42:42::1/128
	</pre>		</pre>

			Next we need to open UDP traffic on our port. Do it in stronger_firewall.

2024-12-10T12:15:48Z

2024-12-10T12:10:16Z

Installation