WireGuard example configuration for VPN

README.md

Server

iptables -A FORWARD -i wg0 -o YOUR_INTERFACE -s 10.200.200.0/24 -j ACCEPT
iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -t nat -A POSTROUTING -o YOUR_INTERFACE -s 10.200.200.0/24 -j MASQUERADE

Client

wg-quick up `pwd`/client.conf
wg-quick down `pwd`/client.conf

Issues

• can't read wg-quick's resolve.conf due to insufficient permissions

client.conf

[Interface]
Address = 10.200.200.2/24
PrivateKey = <client private key>
#DNS = 1.1.1.1

[Peer]
PublicKey = <server public key>
PresharedKey =
AllowedIPs = 0.0.0.0/0, ::/0
Endpoint = 123.123.123.123:51820

vpn.netdev

[NetDev]
Name = wg0
Kind = wireguard

[WireGuard]
ListenPort = 51820
PrivateKey = <server private key>

[WireGuardPeer]
PublicKey = <server public key>
PresharedKey = 
AllowedIPs = 10.200.200.2/32

vpn.network

[Match]
Name = wg0

[Network]
Address = 10.200.200.1/32

[Route]
Gateway = 10.200.200.1
Destination = 10.200.200.0/24