Added wireguard docs article for alpine
This commit is contained in:
parent
11260885e2
commit
73355d27ed
1 changed files with 61 additions and 0 deletions
61
content/docs/alpine/wireguard.md
Normal file
61
content/docs/alpine/wireguard.md
Normal file
|
@ -0,0 +1,61 @@
|
|||
---
|
||||
title: Wireguard
|
||||
description: How to configure a wireguard endpoint on Alpine
|
||||
---
|
||||
|
||||
## Introduction
|
||||
|
||||
This article explains how to configure wireguard on Alpine.
|
||||
|
||||
## Configuration example
|
||||
|
||||
Here is a `/etc/wireguard/wg0.conf` configuration example to create a tunnel listening on udp port 342 and a remote peers :
|
||||
```cfg
|
||||
[Interface]
|
||||
PrivateKey = MzrfXLmSfTaCpkJWKwNlCSD20eDq7fo18aJ3Dl1D0gA=
|
||||
ListenPort = 342
|
||||
|
||||
[Peer]
|
||||
PublicKey = R4A01RXXqRJSY9TiKQrZGR85HsFNSXxhRKKEu/bEdTQ=
|
||||
Endpoint = 168.119.114.183:342
|
||||
AllowedIPs = 10.1.2.9/32
|
||||
PersistentKeepalive = 60
|
||||
```
|
||||
|
||||
Note that there is no ip address in the Interface section, contrary to other operating systems. Putting one here is invalid and wg will fail with an error.
|
||||
|
||||
Your private key goes on the first line as argument to `wgkey`, the other keys are public keys for each peer. In this example I setup a client that can be hidden behind nat therefore I configure a `PersistentKeepalive`. If your host has a public IP this line is not needed.
|
||||
|
||||
To activate the interface configuration, edit `/etc/network/interfaces` :
|
||||
```sh
|
||||
auto wg0
|
||||
iface wg0 inet static
|
||||
requires eth0
|
||||
use wireguard
|
||||
address 10.1.2.3/24
|
||||
```
|
||||
|
||||
Then run `ifup wg0`.
|
||||
|
||||
## Administration
|
||||
|
||||
Private keys can be generated with the following command :
|
||||
{{< highlight sh >}}
|
||||
openssl rand -base64 32
|
||||
{{< /highlight >}}
|
||||
|
||||
The tunnel can be managed with the `wg` command:
|
||||
```sh
|
||||
root@hurricane:~# wg
|
||||
interface: wg0
|
||||
public key: 7fbr/yumFeTzXwxIHnEs462JLFToUyJ7yCOdeDFmP20=
|
||||
private key: (hidden)
|
||||
listening port: 342
|
||||
|
||||
peer: R4A01RXXqRJSY9TiKQrZGR85HsFNSXxhRKKEu/bEdTQ=
|
||||
endpoint: 168.119.114.183:342
|
||||
allowed ips: 10.1.2.9/32
|
||||
latest handshake: 57 seconds ago
|
||||
transfer: 1003.48 KiB received, 185.89 KiB sent
|
||||
persistent keepalive: every 1 minute
|
||||
```
|
Loading…
Add table
Reference in a new issue