From b981d00f66c2f0e4d6b8d8ff5bf7e5c321d22775 Mon Sep 17 00:00:00 2001 From: Anton Afanasyeu Date: Mon, 8 Jun 2026 20:16:02 +0300 Subject: [PATCH] brief wg config initial --- examples/wireguard/BE_alpine/README.txt | 9 +++++++++ examples/wireguard/BE_alpine/server.privatekey | 1 + examples/wireguard/BE_alpine/server.publickey | 1 + examples/wireguard/BE_alpine/wg0.conf | 12 ++++++++++++ 4 files changed, 23 insertions(+) create mode 100644 examples/wireguard/BE_alpine/README.txt create mode 100644 examples/wireguard/BE_alpine/server.privatekey create mode 100644 examples/wireguard/BE_alpine/server.publickey create mode 100644 examples/wireguard/BE_alpine/wg0.conf diff --git a/examples/wireguard/BE_alpine/README.txt b/examples/wireguard/BE_alpine/README.txt new file mode 100644 index 0000000..7749939 --- /dev/null +++ b/examples/wireguard/BE_alpine/README.txt @@ -0,0 +1,9 @@ +alpine: +# apk add wireguard-tools iptables +# wg genkey | tee server.privatekey | wg pubkey > server.publickey + +create /etc/wireguard/wg0.conf -> symlinked to /var/www/localhost/htdocs/apps/app/androidcast_project/android_cast/examples/wireguard/BE_alpine/wg0.conf + +follow https://wiki.alpinelinux.org/wiki/Configure_a_Wireguard_interface_(wg) + +# chmod go= server.privatekey diff --git a/examples/wireguard/BE_alpine/server.privatekey b/examples/wireguard/BE_alpine/server.privatekey new file mode 100644 index 0000000..e3020b6 --- /dev/null +++ b/examples/wireguard/BE_alpine/server.privatekey @@ -0,0 +1 @@ +uIhZdcs0U6W09PVytrMD7qChzzvAgBAnZUI47V/axX4= diff --git a/examples/wireguard/BE_alpine/server.publickey b/examples/wireguard/BE_alpine/server.publickey new file mode 100644 index 0000000..37bcda4 --- /dev/null +++ b/examples/wireguard/BE_alpine/server.publickey @@ -0,0 +1 @@ +EV2nnwHH7xe3jA5J46Rjtl8ao+ybZinibKg2Hy83GBw= diff --git a/examples/wireguard/BE_alpine/wg0.conf b/examples/wireguard/BE_alpine/wg0.conf new file mode 100644 index 0000000..6bf198f --- /dev/null +++ b/examples/wireguard/BE_alpine/wg0.conf @@ -0,0 +1,12 @@ +[Interface] +Address = 172.200.2.1/16, fddd::ffff/64 +ListenPort = 45340 +# the key from the previously generated privatekey file +PrivateKey = uIhZdcs0U6W09PVytrMD7qChzzvAgBAnZUI47V/axX4= +PostUp = iptables -A FORWARD -i %i -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE;iptables -A FORWARD -o %i -j ACCEPT; ip6tables -A FORWARD -i %i -j ACCEPT; ip6tables -t nat -A POSTROUTING -o eth0 -j MASQUERADE;ip6tables -A FORWARD -o %i -j ACCEPT +PostDown = iptables -D FORWARD -i %i -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE;iptables -D FORWARD -o %i -j ACCEPT; ip6tables -D FORWARD -i %i -j ACCEPT; ip6tables -t nat -D POSTROUTING -o eth0 -j MASQUERADE;ip6tables -D FORWARD -o %i -j ACCEPT + +[Peer] +# obtained from client device via wireguard connection setup process +PublicKey = EV2nnwHH7xe3jA5J46Rjtl8ao+ybZinibKg2Hy83GBw= +AllowedIPs = 172.200.2.2/16, fddd::1/128