switching public/private

This commit is contained in:
Jeff Clement 2024-11-15 08:33:57 -07:00
parent 09c1f39a62
commit 27be196d17
Signed by: jeff
GPG key ID: 3BCB43A3F0E1D7DA
10 changed files with 1 additions and 1 deletions

1
diy-tunnel/vps/README.md Normal file
View file

@ -0,0 +1 @@
`wg0.conf` should be deployed to `/etc/wireguard/wg0.conf` on the public facing (VPS) server.

15
diy-tunnel/vps/wg0.conf Normal file
View file

@ -0,0 +1,15 @@
[Interface]
Address = 10.0.0.1/24 # Private IP for the VPS in the VPN network
ListenPort = 51820 # Default WireGuard port
PrivateKey = ###PRIVATE KEY FOR PUBLIC SERVER####
# packet forwarding
PreUp = sysctl -w net.ipv4.ip_forward=1
# port forwarding (HTTP, HTTPS) - update port list as required
PreUp = iptables -t nat -A PREROUTING -i eth0 -p tcp -m multiport --dports 80,443 -j DNAT --to-destination 10.0.0.2
PostDown = iptables -t nat -D PREROUTING -i eth0 -p tcp -m multiport --dports 80,443 -j DNAT --to-destination 10.0.0.2
[Peer]
PublicKey = ###PUBLIC KEY FOR PRIVATE SERVER####
AllowedIPs = 10.0.0.2/32 # IP of the home server in VPN