WireGuard

created: Wed, 30 Oct 2024 07:52:02 GMT, modified: Fri, 03 Jan 2025 16:59:54 GMT

Setting up WireGuard for private VPN.

enable UPnP with miniupnpd on the exit node
endpoint discovery
- https://www.jordanwhited.com/posts/wireguard-endpoint-discovery-nat-traversal/
Tailscale DERP servers:
- curl https://controlplane.tailscale.com/derpmap/default

Server

Minimal config file /etc/wireguard/wg0.conf:

[Interface]
Address = 172.16.1.1/24
SaveConfig = true
ListenPort = 51820
PrivateKey = ...

[Peer]
AllowedIPs = 172.16.1.2/32
PublicKey = ...