Difference between revisions of "Wireguard"

Revision as of 05:19, 15 May 2024

Follow these guides:

But note that `AllowedIPs` on the client should be `AllowedIPs = 0.0.0.0/0, ::/0` to use as a VPN for everything (more detail here: https://docs.pi-hole.net/guides/vpn/wireguard/route-everything/)

[Interface]
Address = 192.168.130.1/24
ListenPort = 51820
PrivateKey = PRIV123


[Peer]
PublicKey = PUB456
AllowedIPs = 192.168.130.2/32

Address: Address of the server and the subnet that will be used for the private network. Optional, not sure what happens without it!
ListenPort: Port on which the server will listen for connections (51820 is generally used)
PrivateKey: Private key for the server (used to encrypt traffic going back to the peer)

PublicKey: the public key for the peer (used to identify and authenticate traffic coming from the peer)
AllowedIPs: addresses from which the peer is allowed to send traffic (the subnet will typically be 32 here)

@@ Line 22: / Line 22: @@
 ==== Interface ====
 ;Address
-:the address of the server and the subnet that will be used for the private network
+:Address of the server and the subnet that will be used for the private network. Optional, not sure what happens without it!
 ;ListenPort
-:the port on which the server will listen for connections (51820 is generally used)
+:Port on which the server will listen for connections (51820 is generally used)
 ;PrivateKey
-:the private key for the server (used to encrypt traffic going back to the peer)
+:Private key for the server (used to encrypt traffic going back to the peer)
 ==== Peer ====