[Interface]
Address = 1.1.1.1/28 (мой свободный белый ип)
ListenPort = 51820
PrivateKey = ключ из сгенерированного файла
PostUp = sysctl net.ipv4.ip_forward=1
PostUp = iptables -A FORWARD -i %i -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
PostDown = sysctl net.ipv4.ip_forward=0
PostDown = iptables -D FORWARD -i %i -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE
[Peer]
PublicKey = так же из сгенерированного файла для Клиента 1
AllowedIPs = 1.1.1.2/28 # - это IP на Клиенте 1
# Т.е. у Сервера IP заканчивается на 1, а у Клиента(ов peer-ов) на 2 и далее
# Если Клиентов больше, чем 1, то по возрастанию каждый Peer прописывается с увеличением последней цифры в его IP, например:
[Peer]
PublicKey = так же из сгенерированного файла для Клиента 2
AllowedIPs = 1.1.1.3/28 # - это IP на Клиенте 2
[Interface]
PrivateKey = 2OFFAe5yzYF9mti+NdVf/XPHTyJiVgICYj+hW02IVEk=
Address = 1.1.1.2/28
DNS = 77.88.8.8
[Peer]
PublicKey = CSBbv/HvYOszskTR3fH2wRbJqH+wnRmER63E2UBDimE=
Endpoint = 1.1.1.1:51820
AllowedIPs = 0.0.0.0/0,::/0
PersistentKeepalive = 25
[Interface]
PrivateKey = ххххххххххххххххххххх=
Address = 1.1.1.3/28
DNS = 77.88.8.8
[Peer]
PublicKey = хххххххххххххххххххххх=
Endpoint = 1.1.1.1:51820
AllowedIPs = 0.0.0.0/0,::/0
PersistentKeepalive = 25
PostUp = sysctl net.ipv4.ip_forward=1
PostUp = ufw route allow in on wg0 out on enp4s0
...
PreDown = ufw route delete allow in on wg0 out on enp4s0
PostDown = sysctl net.ipv4.ip_forward=0
...
/etc/wireguard/wg0.conf
ip a
2: enp4s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
iptables -t nat -A POSTROUTING -o enp4s0 -j MASQUERADE
--osinfo detect=on,require=off
и
--check all=off
virt-install --virt-type=kvm -n ubuntu --ram=4096 --vcpus=4 --cpu host --sound ac97 -w bridge=virbr0 -v --disk path=/home/user/libvirt/images/ubuntu,size=35,format=raw -c /home/user/Загрузки/mini.iso --osinfo detect=on,require=off --graphics spice --boot uefi --destroy-on-exit &
virt-install --virt-type=kvm --name arch --ram=2048 --vcpus=2 --cpu host --sound ac97 -w bridge=virbr0 -v --disk path=/home/user/libvirt/images/arch,size=30,format=raw -c /home/user/Загрузки/archlinux-2022.06.01-x86_64.iso --check all=off --graphics spice --boot loader=/usr/share/ovmf/OVMF.fd --destroy-on-exit &
с интерфейсом gdm3
ListenPort = 12345
/usr/bin/wg-quick
HAVE_SET_FIREWALL=0
add_default() {
local table line
if ! get_fwmark table; then
table=51820
apt update; apt full-upgrade
apt install sudo
groups test
test : test cdrom floppy audio dip video plugdev users netdev
for group in autologin optical scanner storage wheel; do groupadd $group; done
usermod -aG autologin,optical,scanner,storage,sudo,wheel test
groups test
test : test cdrom floppy sudo audio dip video plugdev users netdev autologin optical scanner storage wheel
exit
[Interface]
Address = 10.10.10.1/32
PostUp = ufw route allow in on wg0 out on ens3
PostUp = iptables -A FORWARD -i %i -j ACCEPT; iptables -t nat -A POSTROUTING -o ens3 -j MASQUERADE
PreDown = ufw route delete allow in on wg0 out on ens3
PostDown = iptables -D FORWARD -i %i -j ACCEPT; iptables -t nat -D POSTROUTING -o ens3 -j MASQUERADE
ListenPort = 17117
PrivateKey = aCGZud;KDJDekjjkjKD;iJJDJKDJADFDAno=
[Peer]
PublicKey = j8t1UKSDJFHUEUueeuhYEJeugNo+E//ryo=
AllowedIPs = 10.10.10.2/32
[Interface]
PrivateKey = eKhPQ5Kh8+R00sQkFAF/HQExZZYpK6A=
Address = 10.10.10.2/32
DNS = 8.8.8.8
[Peer]
PublicKey = e+AbYhQrndfjkIE8EdkfjlsdIdDbCQCqthU8=
Endpoint = server_IP:17117
AllowedIPs = 0.0.0.0/0,::/0
PersistentKeepalive = 20
AllowedIPs = 10.0.0.2/32
Address = 10.0.0.1/24