Skip to content
webpack
Sign in
All apps
Security

WireGuard VPN

High risk: it enables IPv4 forwarding (a sysctl.d file) and adds firewall NAT rules for the VPN subnet. Installs WireGuard, creates the server and client keys (mode 600), starts wg-quick@wg0 and writes client files to /root/wireguard-clients. Safe to run again.

What it does

Security Tool Installers

What you will be asked

You fill these in during setup.

  • Number of clients Required
    How many client configuration files to create (1 to 10). Each device that connects needs its own file. Running the script again with a higher number only adds the missing ones.
  • WireGuard UDP port RequiredAdvanced settings
    The UDP port the VPN server listens on. The default is fine unless your network blocks it. It is only used the first time; an existing server keeps its port.
  • Public endpoint OptionalAdvanced settings
    Optional. The public IP address or domain name that clients connect to. Leave empty to detect this server's public address; the script stops if it only finds a private one (a server behind NAT). Used when client files are created.

Reconnecting Could not reconnect The page is paused

The connection to the site dropped. We are bringing it back; your page stays as it is. Check your internet connection. We keep trying by ourselves, and the page reloads once the site answers. This page was paused to save resources. Resume it to continue.