Project

General

Profile

The ungleich VPN infrastructure » History » Version 31

Timothée Floure, 01/08/2020 06:20 PM
Move customer documentation to its own page

1 1 Nico Schottelius
h1. The ungleich VPN infrastructure
2
3 5 Nico Schottelius
{{toc}}
4
5 31 Timothée Floure
*%{color:red}This document only concerns server-side configuration and is intended for ungleich staff. See [[Ungleich IPv6 wireguard VPN]] page for end-user/customer documentation.%*
6
7 11 Nico Schottelius
h2. Status
8
9
This document is *IN PRODUCTION*.
10 1 Nico Schottelius
11 31 Timothée Floure
h2. Infrastructure
12 1 Nico Schottelius
13 31 Timothée Floure
Server: vpn-2a0ae5c1.ungleich.ch
14
Port: 51820
15 1 Nico Schottelius
16 31 Timothée Floure
h2. How to add a new customer connection
17 16 Nico Schottelius
18
* Get the public key of the customer
19 15 Nico Schottelius
* Edit dot-cdist/type/__ungleich_wireguard/manifest and add the new network definition at the end of the file
20 6 Nico Schottelius
* Let the customer know their network
21
22 31 Timothée Floure
h2. Sample server configuration
23 10 Nico Schottelius
24
This is just for reference - as a client you don't need this configuration
25 6 Nico Schottelius
26
/etc/wireguard/wg0.conf:
27
28
<pre>
29
[Interface]
30 7 Nico Schottelius
ListenPort = 51820
31 6 Nico Schottelius
PrivateKey = SERVERKEYHERE
32
33
# Nico, 2019-01-23
34
[Peer]
35
PublicKey = kL1S/Ipq6NkFf1MAsNRou4b9VoUsnnb4ZxgiBrH0zA8=
36
AllowedIPs = 2a0a:e5c1:101::/48
37
38
# Customer networks below
39
# ...
40
</pre>
41
42
Sample server rc.local:
43
44 1 Nico Schottelius
<pre>
45
ip link add dev wg0 type wireguard
46
ip addr add 2a0a:e5c1:100::1/40 dev wg0
47
wg setconf wg0 /etc/wireguard/wg0.conf
48 17 Nico Schottelius
ip link set wg0 up
49 18 Nico Schottelius
50 1 Nico Schottelius
</pre>