Wireguard VPN server
Go to file
deflax 659c80ccb2 install zip and mutt globally 2024-02-06 15:01:45 +02:00
client-tools Initial migration 2023-11-10 02:03:18 +02:00
.gitignore define .gitignore 2023-11-09 19:44:20 -05:00
LICENSE Initial commit 2023-11-10 02:01:46 +02:00
README.md cancel execution of empty config 2023-11-09 19:19:46 -05:00
config.dist Initial migration 2023-11-10 02:03:18 +02:00
gen-ip-database.sh Initial migration 2023-11-10 02:03:18 +02:00
init.sh install zip and mutt globally 2024-02-06 15:01:45 +02:00
ldapsync.py Initial migration 2023-11-10 02:03:18 +02:00
mail.md Initial migration 2023-11-10 02:03:18 +02:00
peer_add.sh Initial migration 2023-11-10 02:03:18 +02:00
peer_addall.sh Initial migration 2023-11-10 02:03:18 +02:00
peer_del.sh Initial migration 2023-11-10 02:03:18 +02:00
peer_disable.sh Initial migration 2023-11-10 02:03:18 +02:00
peer_mail.sh Initial migration 2023-11-10 02:03:18 +02:00
wgldap.sh Initial migration 2023-11-10 02:03:18 +02:00
wgldapsync.service Initial migration 2023-11-10 02:03:18 +02:00
wgldapsync.timer Initial migration 2023-11-10 02:03:18 +02:00
wgstats.sh check for clients on first run 2023-11-09 19:54:21 -05:00

README.md

\ \        /_)           ___|       |        
 \ \  \   /  |  __| _ \ |      _` | __|  _ \ 
  \ \  \ /   | |    __/ |   | (   | |    __/ 
   \_/\_/   _|_|  \___|\____|\__,_|\__|\___| 

Wireguard based VPN server endpoint with LDAP support

Tested on Debian 12 bookworm

Server Commands

./init.sh - setup system services (wireguard, unbound, iptables, sysctl)

./peer_add.sh - define new peer for a new remote device. generates config and QR code inside /etc/wireguard/clients

./peer_del.sh - delete a peer and salvage its ip address back to the ip pool

./peer_addall.sh - recreates wireguard state using existing clients in /etc/wireguard/clients dir

./peer_mail.sh - send the generated profile to the client and remove the sensitive data from server

Server Tools

./wgstats.sh - show peer stats similar based on wg show all dump

./wgldap.sh - tail the log of the wgldapsync service

Client Side Tools

./client-tools/wg-rapid - modified wireguard client based on wg-quick that works with systemd-resolv

./client-tools/startvpn.desktop - shortcut for wg-rapid. update the parameter with peer filename