YunoHost-Apps/wireguard_ynh
1
0
Fork 0
mirror of https://github.com/YunoHost-Apps/wireguard_ynh.git synced 2024-09-03 20:35:58 +02:00
Code Issues Activity Actions
wireguard_ynh/doc/DISCLAIMER.md
tituspijean d9e2af3182 Update DISCLAIMERs
2021-07-04 23:46:46 +02:00

1.2 KiB
Raw Blame History

  • WireGuard for YunoHost will add a DMKS module to your Linux kernel.
    • You may need to reboot your server for WireGuard to be able to start.
  • The package includes WireGuard and non-official web UI to configure it.
    • Avoid altering the configuration files via the command line interface, though.
  • Use YunoHost permissions panel to allow users to access the web UI.
  • Only one network interface, wg0, can be managed with this app at the moment.

Make your server share its Internet connection

Enable port forwarding

sudo nano /etc/sysctl.conf
# Uncomment the following lines:
net.ipv4.ip_forward = 1
net.ipv6.conf.all.forwarding = 1
# Save and quit (CTRL+O, CTRL+X)
sudo sysctl -p

Add the following commands in WireGuard Server menu, like in this picture. Replace eth0 with the interface connected to the Internet:

Post Up Script

iptables -A FORWARD -i %i -j ACCEPT; iptables -A FORWARD -o %i -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

Post Down Script

iptables -D FORWARD -i %i -j ACCEPT; iptables -D FORWARD -o %i -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE