Configure Client Wireguard VPN Server on Linux

How to use Stanislas’s configuration scripts to configure a WireGuard client VPN server on Linux.

Configuration Details

Linux Server Configuration

Install Wireguard configuration script:

curl -O https://raw.githubusercontent.com/angristan/wireguard-install/master/wireguard-install.sh

Example Output:

jemurray@home-server:~$ curl -O https://raw.githubusercontent.com/angristan/wireguard-install/master/wireguard-install.sh
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100 15088  100 15088    0     0   8533      0  0:00:01  0:00:01 --:--:--  8529

Make the script executable:

chmod +x wireguard-install.sh

Example Output:

jemurray@home-server:~$ chmod +x wireguard-install.sh

Execute the installation script:

./wireguard-install.sh

Example output:

jemurray@home-server:~$ sudo ./wireguard-install.sh
Welcome to the WireGuard installer!
The git repository is available at: https://github.com/angristan/wireguard-install

I need to ask you a few questions before starting the setup.
You can leave the default options and just press enter if you are ok with them.

IPv4 or IPv6 public address: 99.28.30.123
Public interface: ens160
WireGuard interface name: wg0
Server's WireGuard IPv4: 10.66.66.1
Server's WireGuard IPv6: fd42:42:42::1
Server's WireGuard port [1-65535]: 49111
First DNS resolver to use for the clients: 208.67.222.222
Second DNS resolver to use for the clients (optional): 208.67.220.220

Okay, that was all I needed. We are ready to setup your WireGuard server now.
You will be able to generate a client at the end of the installation.
Press any key to continue...
Hit:1 http://us.archive.ubuntu.com/ubuntu bionic InRelease
Get:2 https://download.docker.com/linux/ubuntu bionic InRelease [64.4 kB]
Hit:3 https://packages.grafana.com/oss/deb stable InRelease
...
Tell me a name for the client.
The name must consist of alphanumeric character. It may also include an underscore or a dash and can't exceed 15 chars.
Client name: phalanges
Client's WireGuard IPv4: 10.66.66.2
Client's WireGuard IPv6: fd42:42:42::2

Here is your client config file as a QR Code:
....QR CODE PRINTED HERE...
It is also available in /home/jemurray/wg0-client-phalanges.conf
If you want to add more clients, you simply need to run this script another time!

Client Configuration

Copy the configuration file /home/jemurray/wg0-client-phalanges.conf from the previous step to the client.

In this example, we are using the macOS wireguard client:

Import the configuration file into the client:

Enable the VPN by clicking the name of the VPN profile:

Example of activated VPN:

Validate VPN connection:

jemurray@phalanges:~ $ ping 192.168.86.5
PING 192.168.86.5 (192.168.86.5): 56 data bytes
64 bytes from 192.168.86.5: icmp_seq=0 ttl=64 time=83.039 ms
64 bytes from 192.168.86.5: icmp_seq=1 ttl=64 time=45.536 ms
^C
--- 192.168.86.5 ping statistics ---
2 packets transmitted, 2 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 45.536/64.287/83.039/18.752 ms