Post

WireGuard setup

Posted
By Josh G
1 min read

This took me a few days of failed configurations to finally figure out.

PiVPN Attempts

Intially I had used this tutorial from Homelab Tim, which used PiVPN as a method of adding Wireguard to an Ubuntu-Server LXC. Unfortunately I wasn’t able to correctly conffigure it after multiple attempts using this method. I’m still unsure what the exact problem was that caused my connections to not link, but I belived it had to do with either an IP mismatch between the peer and interface. (Although I made sure to always make sure they were configured correctly)

While these attempts ultimately failed, I was able to learn a fair bit of the beginner Linux commands during my troubleshooting. Which helped me during my next attempts.

Wireguard Roadwarrior Attempt

This attempt uses this tutorial from homelabd, which uses this github repository from a user called Nyr. This opted to use Nyr’s wget script to install wireguard and run through an installation wizard to assist with setup. I found this to be a simpler method of configuring a fresh wireguard install and peering it to a device.

Notes

  • I found that by using a DDNS to link my dynamic ip from my ISP makes the maintenance of switching the endpoint IP every few weeks much simpler. I use DuckDNS.
  • I have also used a different port number as I have heard it’s a good security practice to follow.
  • For both methods, be sure to add these lines of code to your LXC.conf file (usually at /etc/pve/lxc/(LXC #).conf). This adds the /dev/net/tun device.

    lxc.cgroup2.devices.allow: c 10:200 rwm
    lxc.mount.entry: /dev/net dev/net none bind,create=dir

  • Also use the line to enable your LXC to access the /dev/net/tun from the host.

    chown 100000:100000 /dev/net/tun

  • Proxmox has documentation on this.
Homelab
homelab tutorial wireguard
This post is licensed under CC BY 4.0 by the author.