WireGuard: Difference between revisions

We will now configure the server settings for WireGuard. WireGuard comes complete with tools to create the the private/public keys needed to function and is configured with a simple configuration file.

For the following sets, you may need to become a superuser (<code>su</code>) to access the WireGuard folder.

* Become a superuser - <code>su</code>

* Type your root password and press {{key press|Enter}}. The terminal text should change to red to indicate you are now a superuser.

* Move to the WireGuard directory - <code>cd /etc/wireguard</code>

You will find this directory is empty - we will work in this directory which is secure.

* Create a private and public key for the server. You can use the following command:

* Change the permissions of the private key so that only superusers can access the key: <code>chmod 600 server-privatekey</code>

* We need the private key to put in the configuration file: <code>cat server-privatekey</code>. This will display the key on the screen which can then be copied.

* We will create a configuration file with the same name as the interface WireGuard will create: <code>nano wg0.conf</code>

* Insert the following into the file:

** <code>PostUp = iptables -t nat -A POSTROUTING -o em1 -j MASQUERADE</code> and <code>PostDown = iptables -t nat -D POSTROUTING -o em1 -j MASQUERADE</code> - the interface needs changing according to the name of the Ethernet card on your computer (<code>em1</code> in this example</code>, which can be found by typing <code>ip a</code>. Common names include <code>eth0</code>, <code>eno1</code> and <code>em1</code>.

* Once done, save the file: {{key press|Ctrl|X}}, {{key press|Y}} then {{key press|Enter}}.

== Start WireGuard ==