You can also change the ListenPort line if you would like WireGuard to be available on a different port: nano /etc/wireguard/wg0.conf Once you have the required private key and IP address(es), create a new configuration file using nano or your preferred editor by running the following command: sudo nano /etc/wireguard/wg0.confĪdd the following lines to the file, substituting your private key in place of the highlighted base64_enpred_private_key_goes_here value, and the IP address(es) on the Address line. You can choose any range of IP addresses from the following reserved blocks of addresses:ġ72.16.0.0 to 172.31.255.255 (172.16/12 prefix)ġ92.168.0.0 to 192.168.255.255 (192.168/16 prefix)įor the purposes of this tutorial we’ll use 10.8.0.0/24 as a block of IP addresses from the first range of reserved IPs.Ĭreating a WireGuard Server Configuration Copy it somewhere for reference, since you will need to distribute the public key to any peer that connects to the server.
When you run the command you will again receive a single line of base64 enpred output, which is the public key for your WireGuard Server. Use the following command to create the public key file: sudo cat /etc/wireguard/private.key | wg pubkey | sudo tee /etc/wireguard/public.key The next step is to create the corresponding public key, which is derived from the private key. Now you can proceed and create the private key for WireGuard using the following command: wg genkey | sudo tee /etc/wireguard/private.key Use the following umask command to ensure new directories and files (in your current terminal session only) get created with limited read and write permissions: umask 077 Now that you have WireGuard installed, the next step is to generate a private and public keypair for the server. # mv /etc/netplan/00-installer-config.yaml /etc/netplan/ġ: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
The interface name is different on each environment, replace it to your own one. # Let NetworkManager manage all devices on this systemĬhange to static IP address if you use Ubuntu as a server.
Also, in checking /etc/neteplan/01-network-manager-all.yaml there is a message: In Ubuntu 21.04, you will not see and files at /etc/network/interfaces.
0 kommentar(er)
