This repo automates the setup of my personal wireguard VPN. It requires that you're running a Linux kernel with wireguard support and that you've installed the Nix package manager.
To get started, just run nix-shell
in this directory, then run make start-server
.
This will perform the following actions:
- Automatically generate keypairs (if they are not present).
- Add and configure a new wireguard network interface.
Once the service is running, you can view its status with make status
.
Manual steps:
- Write your own config.json file. See the description at the top of the Makefile.
- If necessary, override the default
SERVER_IFACE
formake
. - If necessary, set up dynamic DNS for home network.
- Set a static IP address on the wireguard host.
- Configure the router to forward UDP port 51820 to the host.