fix wg addconf missing

This commit is contained in:
ducoterra
2020-08-10 22:12:23 -04:00
parent 0aaf4f4461
commit 04491fedd4

View File

@@ -66,7 +66,7 @@ cat > /etc/wireguard/wg0.conf <<EOF
Address = 10.10.0.1/24 Address = 10.10.0.1/24
Address = fd86:ea04:1111::1/64 Address = fd86:ea04:1111::1/64
SaveConfig = false SaveConfig = false
PostUp = iptables -A FORWARD -i wg0 -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE; ip6tables -A FORWARD -i wg0 -j ACCEPT; ip6tables -t nat -A POSTROUTING -o eth0 -j MASQUERADE PostUp = wg addconf wg0 /etc/wireguard/peers.conf; iptables -A FORWARD -i wg0 -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE; ip6tables -A FORWARD -i wg0 -j ACCEPT; ip6tables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
PostDown = iptables -D FORWARD -i wg0 -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE; ip6tables -D FORWARD -i wg0 -j ACCEPT; ip6tables -t nat -D POSTROUTING -o eth0 -j MASQUERADE PostDown = iptables -D FORWARD -i wg0 -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE; ip6tables -D FORWARD -i wg0 -j ACCEPT; ip6tables -t nat -D POSTROUTING -o eth0 -j MASQUERADE
ListenPort = 51820 ListenPort = 51820
PrivateKey = $PRIVKEY PrivateKey = $PRIVKEY
@@ -75,4 +75,9 @@ EOF
sysctl -p sysctl -p
service wg-quick@wg0 start service wg-quick@wg0 start
systemctl enable wg-quick@wg0 systemctl enable wg-quick@wg0
``` ```
## Add clients
1. Copy peers.conf to /etc/wireguard/peers.conf
1. Add more peers as needed to peers.conf