wg genkey > wg-c2s-private.key

cat wg-c2s-private.key | wg pubkey > wg-c2s-public.key

Wireguard wird über Konfigurationsdateien verwaltet. Diese liegen unter /etc/wireguard/<interface name>.conf.

Eine solche Datei sieht ungefähr so aus.

/etc/wireguard/wg0.conf

# Lokales Interface
[Interface]
Address = 192.168.123.1/24
PrivateKey = <private key of local interface>
ListenPort = 51820 # Netzwerport
PostUp = <bash command>
PostDown = <bash command>
 
# Client 1
[Peer]
PublicKey = <public key of client 1>
AllowedIPs = 192.168.123.12/32
 
# Client 2
[Peer]
PublicKey = <public key of client 2>
AllowedIPs = 192.168.123.11/32

wg-quick up <interface name>

wg-quick down <interface name>

systemctl start wg-quick@<interface name>

systemctl stop wg-quick@<interface name>

systemctl enable wg-quick@<interface name>