wireguard-setup/packer/rootfs/etc/wireguard/wg0.conf
Héctor Molinero Fernández 50f6458561 Don't invoke a subshell
2021-11-21 14:23:14 +01:00

13 lines
630 B
Plaintext

[Interface]
Address = 10.10.10.1/24, fd10:10:10::1/64
ListenPort = 51820
# Load keys
PostUp = [ -s '/etc/wireguard/%i-privatekey' ] || { umask 077 && wg genkey > '/etc/wireguard/%i-privatekey'; }
PostUp = [ -s '/etc/wireguard/%i-publickey' ] || { umask 022 && wg pubkey < '/etc/wireguard/%i-privatekey' > '/etc/wireguard/%i-publickey'; }
PostUp = wg set '%i' private-key '/etc/wireguard/%i-privatekey'
# Load peers
PostUp = [ -e '/etc/wireguard/%i-peers.conf' ] || { umask 022 && touch '/etc/wireguard/%i-peers.conf'; }
PostUp = wg addconf '%i' '/etc/wireguard/%i-peers.conf'
# Reload nftables
PostUp = nft -f /etc/nftables.conf