Convert step-by-step sections to the steps component
This commit is contained in:
@@ -5,15 +5,6 @@ description: Install and configure WireGuard VPN to securely access your homelab
|
||||
|
||||
|
||||
:ellipsis{left=0px width=40rem top=10rem blur=140px zIndex=60}
|
||||
# Wireguard
|
||||
|
||||
::note
|
||||
🎯 __Goals:__
|
||||
|
||||
- Install Wireguard
|
||||
- Configure clients
|
||||
- Access the secure network
|
||||
::
|
||||
|
||||
## Introduction
|
||||
Using a VPN allows remote access to a server’s local resources without exposing them to the internet. It’s a clean and secure way to access services like SSH without exposing the port publicly. With a VPN, you can securely connect to your network from anywhere and make devices on different networks communicate.
|
||||
@@ -72,6 +63,9 @@ root
|
||||
└── .env
|
||||
```
|
||||
|
||||
::steps{level="3"}
|
||||
### Deploy the stack
|
||||
|
||||
Open Dockge, click **Compose**, and name the stack `wg_easy`.
|
||||
|
||||
Copy the following configuration:
|
||||
@@ -145,25 +139,48 @@ Deploy the stack and access the local web UI at `http://server-ip:51821`.
|
||||
If the deployment fails, check your firewall rules.
|
||||
::
|
||||
|
||||
### Create your account
|
||||
|
||||
Once connected, follow the web UI instructions to:
|
||||
|
||||
- Create your admin account and password.
|
||||
- Set the host field (use your public IP or domain name).
|
||||
|
||||
### Configure the tunnel
|
||||
|
||||
Then go to *Administrator → Admin Panel → Config*:
|
||||
|
||||
- Change `Allowed IPs` from `0.0.0.0/24` to `10.8.0.0/24` for **split tunneling**.
|
||||
- Remove IPv6 (it often causes unnecessary issues).
|
||||
|
||||
### Done !
|
||||
::
|
||||
|
||||
### Retrieve Configuration Files
|
||||
|
||||
To configure clients:
|
||||
|
||||
1. Access the web UI: `http://server-ip:51821`
|
||||
2. Create a new client
|
||||
3. Edit the client and add `10.8.0.0/24` to `Server Allowed IPs`
|
||||
4. (Optional) Set `Persistent Keep Alive` to `25` if it’s a permanently connected client
|
||||
5. Save, download, and rename the file to `wg0.conf` (or `wg1.conf`, etc.)
|
||||
::steps{level="4"}
|
||||
#### Access the web UI
|
||||
|
||||
Go to `http://server-ip:51821`.
|
||||
|
||||
#### Create a new client
|
||||
|
||||
#### Edit the client
|
||||
|
||||
Add `10.8.0.0/24` to `Server Allowed IPs`.
|
||||
|
||||
#### (Optional) Set Persistent Keep Alive
|
||||
|
||||
Set it to `25` if it’s a permanently connected client.
|
||||
|
||||
#### Save and rename the file
|
||||
|
||||
Save, download, and rename the file to `wg0.conf` (or `wg1.conf`, etc.)
|
||||
|
||||
#### Done !
|
||||
::
|
||||
|
||||
## Client Server Setup
|
||||
::note
|
||||
@@ -182,7 +199,8 @@ root
|
||||
└── compose.yaml
|
||||
```
|
||||
|
||||
Create the folder:
|
||||
::steps{level="3"}
|
||||
### Create the folder
|
||||
|
||||
```bash [Terminal]
|
||||
sudo mkdir -p /docker/wireguard/config/wg_confs
|
||||
@@ -192,7 +210,7 @@ sudo mkdir -p /docker/wireguard/config/wg_confs
|
||||
✨ **Tip:** You can use [File Browser](/serveex/files/file-browser) instead of the terminal to edit and upload files.
|
||||
::
|
||||
|
||||
Create the `wg0.conf` file:
|
||||
### Create the wg0.conf file
|
||||
|
||||
```bash [Terminal]
|
||||
sudo nano /docker/wireguard/config/wg_confs/wg0.conf
|
||||
@@ -207,6 +225,8 @@ sudo cp ~/wg0.conf /docker/wireguard/config/wg_confs
|
||||
```
|
||||
::
|
||||
|
||||
### Create the compose file
|
||||
|
||||
Create the `compose.yaml` file in `/docker/wireguard`:
|
||||
|
||||
```yaml [compose.yaml]
|
||||
@@ -229,12 +249,16 @@ services:
|
||||
restart: unless-stopped
|
||||
```
|
||||
|
||||
Start the container:
|
||||
### Start the container
|
||||
|
||||
```bash [Terminal]
|
||||
cd /docker/wireguard
|
||||
sudo docker compose up -d
|
||||
```
|
||||
|
||||
### Done !
|
||||
::
|
||||
|
||||
::note
|
||||
|
||||
Repeat this setup for each client.
|
||||
|
||||
Reference in New Issue
Block a user