kevinveenbirkenbach/computer-playbook
1
0
Fork 0
mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2024-09-20 16:23:10 +02:00
Code Issues Packages Projects Releases Wiki Activity
0ddd068ff5
computer-playbook/roles/application-wireguard/README.md

1.8 KiB
Raw Blame History

Role Native Wireguard

Manages wireguard on a client.

Create Client Keys

  wg_private_key="$(wg genkey)"
  wg_public_key="$(echo "$wg_private_key" | wg pubkey)"
  echo "PrivateKey: $wg_private_key"
  echo "PublicKey: $wg_public_key"
  echo "PresharedKey: $(wg genpsk)"

Debug

RTNETLINK answers: Permission denied

When systemctl restart wg-quick@wg0.service returns RTNETLINK answers: Permission denied, modify /etc/sysctl.conf:

net.ipv6.conf.all.disable_ipv6 = 0
net.ipv6.conf.default.disable_ipv6 = 0
net.ipv6.conf.lo.disable_ipv6 = 0

Afterwards reload:

sysctl -p
systemctl restart wg-quick@wg0.service

SSH

When the SSH connection over wireguard is buggy try:

ip li set mtu 1400 dev eth0
ip li set mtu 1400 dev wlo1

This can be connected to the MTU

Other