Scroll to navigation

interfaces-wireguard(5) File Formats Manual interfaces-wireguard(5)

NAME

interfaces-wireguard - Wireguard extensions for the interfaces(5) file format

DESCRIPTION

Wireguard is a comtemporary in-Kernel layer 3 VPN protocol implementation which aims to provide fast and secure tunnels. The following options allow to set up Wireguard VPN tunnels.

WIREGUARD-RELATED OPTIONS

wireguard-config-path path

Denotes the absolute path to the Wireguard configuration file. If no path is given, /etc/wireguard/<interface>.conf will be used. In the latter case use wireguard has to be explicitly set to the interface configuration.

Be aware that the given configuration file will be loaded using wg setconf and not with wg-quick. The file format for both tools isn't compatible so you have to make sure you provide a valid configuration file for the wg tool. If you already have a configuration file for wg-quick you can set up the tunnel manually once and then dump the configuration using wg showconf and save this to path.

EXAMPLES

A Wireguard VPN tunnel with explicit configuration file specified

auto wg-foo
iface wg-foo
	wireguard-config-path /etc/wireguard/foo.conf
	#
	address 192.0.2.23/42
	address 2001:db8::23/64

A Wireguard VPN tunnel with implicit configuration file:

auto wg-bar
iface wg-bar
	use wireguard
	#
	address 192.0.2.23/42
	address 2001:db8::23/64

SEE ALSO

interfaces-wireguard-quick(5)

AUTHORS

Maximilian Wilhelm <max@sdn.clinic>

2024-03-13