henri henri

WireGuard

How to set up WireGuard as an iOS VPN configuration in order to tunnel all traffic from an iOS or iPadOS device through a Linux server.

While there are many configurations possible, my intentation was to secure the traffic from my iOS device by routing it securely through a Linux server. As such, this HowTo will show you how to set-up an initial working configuration, which you can customize afterward.

Most likely things will be missing, such as how to configure the firewall or the init scripts on your Linux distribution. As it won't be possible to cover all Linux flavors this HowTo will attempt to give you a working WireGuard configuration, leaving it up to you to fill-in the blanks. Feel free to write a comment to touch upon your specific situation to help others that might stumble upon this HowTo :)

Note: In these configuration examples I use 10.8.0.1/24 and 10.8.0.2/24. However, as WireGuard IPs may not overlap your other network interfaces

X11 server cheat sheet

Number of supported clients / servers

/etc/X11/xorg.conf.d/99-maxclients.conf

Section "ServerFlags"
    Option "MaxClients" "512"
EndSection

	# resolve power management issues on intel mac computers running LINUX
	#
	# add the acpi_osi=!Darwin Kernel Parameter
	#

	# edit GRUB:
	sudo nano /etc/default/grub

	# find the line GRUB_CMDLINE_LINUX_DEFAULT and add 'acpi_osi=!Darwin', 'quiet' and 'spash' paraemters example follows :
	GRUB_CMDLINE_LINUX_DEFAULT="acpi_osi=!Darwin quiet splash"


	# list key binds
	ghostty +list-keybinds


	# helpful links
	https://ghostty.org/docs/config/keybind/reference

	#!/usr/bin/env bash

	#
	# Create a long running process which may be used for experimentation
	#

	#
	# check how long a process is running in seconds
	# ps -p <PID> -o etimes=
	#

	#
	# SSD's and flash memory is available in a variety of different flavours.
	# As power drains from souch a system you stand to lose those bits!
	#
	# Firmware plays an important role in all of this.
	#
	# If your SSD is not powered up then the firmware will not be able
	# help you out. Most firmware is propriortary and as such, you can
	# power the drive up for a while (...?...) and hope for the best.
	#

	# show the limits in place on the system
	ulimit -a

	# system wide ulmits
	ulimit -Sn # soft limit
	ulimit -Hn # hard limit

	# list open files for all processes and sort them by how many files are open
	for pid in /proc/[0-9]*; do echo "PID = $(basename $pid) : $(ls $pid/fd 2>/dev/null \| wc -l) open files"; done \| sort -n -k5,5

	preview / quicklook systems

	# nemo
	sudo apt install nemo-preview ffmpegthumbnailer tumbler

	# nutilus
	sudo apt install gnome-sushi

	# install on debian dirivitve (commdn line program)
	sudo apt install dict dictd dict-gcide dict-wn

	# look up english word
	dict "word"

	# lookup word just int he collabrative internation dictonary of Ensligh
	dict -d gcide "hello"