Initial commit

1 files changed, 53 insertions, 0 deletions

diff --git a/wireguard-install.sh b/wireguard-install.sh
new file mode 100644
index 0000000..c6569b2
--- /dev/null
+++ b/wireguard-install.sh
@@ -0,0 +1,53 @@
+#!/bin/bash
+
+SERVER_WG_NIC="wg0"
+SERVER_PUB_NIC="ens3"
+SERVER_WG_IPV4="10.66.66.1"
+SERVER_WG_IPV6="fd42:42:42::1"
+#SERVER_PUB_IPV4=""
+SERVER_PORT=1194
+
+CLIENT_IPV4="10.66.66.2"
+CLIENT_IPV6="fd42:42:42::2"
+
+add-apt-repository -y ppa:wireguard/wireguard
+apt-get install -y wireguard
+
+SERVER_PRIV_KEY=$(wg genkey)
+SERVER_PUB_KEY=$(echo "$SERVER_PRIV_KEY" | wg pubkey)
+
+CLIENT_PRIV_KEY=$(wg genkey)
+CLIENT_PUB_KEY=$(echo "$CLIENT_PRIV_KEY" | wg pubkey)
+
+# Add server interface
+echo "[Interface]
+Address = $SERVER_WG_IPV4/24,$SERVER_WG_IPV6/64
+ListenPort = $SERVER_PORT
+PrivateKey = $SERVER_PRIV_KEY
+PostUp = iptables -t nat -A POSTROUTING -o $SERVER_PUB_NIC -j MASQUERADE; ip6tables -t nat -A POSTROUTING -o $SERVER_PUB_NIC -j MASQUERADE
+PostDown = iptables -t nat -D POSTROUTING -o $SERVER_PUB_NIC -j MASQUERADE; ip6tables -t nat -D POSTROUTING -o $SERVER_PUB_NIC -j MASQUERADE" > /etc/wireguard/$SERVER_WG_NIC.conf
+
+# Add the client as a peer to the server
+echo "[Peer]
+PublicKey = $CLIENT_PUB_KEY
+AllowedIPs = $CLIENT_IPV4/32,$CLIENT_IPV6/128" >> /etc/wireguard/$SERVER_WG_NIC.conf
+
+# Create client file with interface
+echo "[Interface]
+PrivateKey = $CLIENT_PRIV_KEY
+Address = $CLIENT_IPV4/24,$CLIENT_IPV6/64" > ~/$SERVER_WG_NIC-client.conf
+
+# Add the server as a peer to the client
+echo "[Peer]
+PublicKey = $SERVER_PUB_KEY
+Endpoint = $SERVER_PUB_IPV4:1194
+AllowedIPs = 0.0.0.0/0,::/0" >> ~/$SERVER_WG_NIC-client.conf
+
+# Enable routing on the server
+echo "net.ipv4.ip_forward = 1
+net.ipv6.conf.all.forwarding = 1" > /etc/sysctl.d/wg.conf
+
+sysctl --system
+
+systemctl start "wg-quick@$SERVER_WG_NIC"
+systemctl enable "wg-quick@$SERVER_WG_NIC"