WireGuard

sudo apt install -y wireguard
 
cd /etc/wireguard
umask 077;
wg genkey | tee privatekey | wg pubkey > publickey
 
/etc/wireguard/wg0.conf
[Interface]
Address = 192.168.6.1/24
ListenPort = 1194
PrivateKey = qz3LQkTEA8tOJEORyUxT2w2SIwdXwCLcO7joKq58tUs=
PostUp = iptables -A FORWARD -i %i -j ACCEPT; iptables -A FORWARD -o %i -j ACCEPT; iptables -t nat -A POSTROUTING -o ens3 -j MASQUERADE
PostDown = iptables -D FORWARD -i %i -j ACCEPT; iptables -D FORWARD -o %i -j ACCEPT; iptables -t nat -D POSTROUTING -o ens3 -j MASQUERADE     
 
[Peer]
PublicKey = wL+h2EqxaQpcWgwO8SIXPGqhHgssvj9xqjHAPjYLJ28=
AllowedIPs = 192.168.6.2/32
 
sudo ufw allow 1194/udp
sudo ufw status
 
sudo systemctl enable wg-quick@wg0
sudo systemctl start wg-quick@wg0
sudo systemctl status wg-quick@wg0
 
# watch connections
watch -n1 wg

sudo apt install wireguard
sudo sh -c 'umask 077; touch /etc/wireguard/wg0.conf'
sudo -i
cd /etc/wireguard/
umask 077; wg genkey | tee privatekey | wg pubkey > publickey
 
cat privatekey
 
cat wg0.conf 
[Interface]
PrivateKey = uEQv4rLd73d9Snowzkdb+zfhlmHL+EoHK8C/yvHnz2o=
Address = 192.168.6.2/24
 
[Peer]
PublicKey = 6LqUWZ7OgM0SX+EKRHpOJ5UscFei/g3LEjA2Y+4K2m4=
AllowedIPs = 192.168.6.0/24, 10.0.1.0/24
Endpoint = ${WG_SERVER_IP}:1194
PersistentKeepalive = 15

# generate configuration as QRcode 
sudo apt install -y qrencode
cat wg0.conf | qrencode -t ansiutf8 -t png -o wg0.png
 
# auto VPN tunnel on Wifi
https://www.youtube.com/watch?v=pCldPHn5SBg

nmcli connection import type wireguard file wg0.conf
nmcli connection up wg0
nmcli connection down wg0
nmcli connection delete wg0
nmcli connection modify wg0 autoconnect no

echo "net.ipv4.ip_forward = 1" >  /etc/sysctl.d/99-ip_forward.conf
sysctl -w net.ipv4.ip_forward=1
 
sudo apt install -y wireguard
sudo ufw allow 22/tcp
sudo ufw allow 1194/udp
ufw enable

echo "deb http://de.archive.ubuntu.com/ubuntu groovy main restricted universe multiverse" |     sudo tee /etc/apt/sources.list.d/ubuntu-groovy.list
echo "deb http://de.archive.ubuntu.com/ubuntu groovy-updates main restricted universe multiverse" |     sudo tee /etc/apt/sources.list.d/ubuntu-groovy-updates.list
sudo apt update
apt install -y network-manager-gnome
rm /etc/apt/sources.list.d/ubuntu-groovy*
apt update

tunnels:
  wg0:
    mode: wireguard
    addresses: [...]
    peers:
      - keys:
          public: rlbInAj0qV69CysWPQY7KEBnKxpYCpaWqOs/dLevdWc=
          shared: /path/to/shared.key
        ...
    key: mNb7OIIXTdgW4khM7OFlzJ+UPs7lmcWHV7xjPgakMkQ=