wireguard_client.yaml

All examples

Change addresses, credentials, certificate paths, and other deployment-specific values before use. This is a complete source file, not a guarantee it can run unchanged on your machine. Read its comments for prerequisites, then run shoes check with the adapted file.

# Demonstration keys only. Replace both keys and the peer endpoint before deployment.
- client_group: vpn
  client_proxies:
    - address: "127.0.0.1:51820"
      protocol:
        type: wireguard
        private_key: "KioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKio="
        public_key: "F9firNML9eGdhhroCYjRf66PZi9dgLAFP2zHPNqx0mQ="
        addresses: ["10.77.0.2/32", "fd77::2/128"]
        allowed_ips: ["0.0.0.0/0", "::/0"]
        persistent_keepalive: 25

- address: "0.0.0.0:1080"
  protocol: {type: socks}
  rules:
    - masks: ["0.0.0.0/0", "::/0"]
      action: allow
      client_chain: vpn

View source at this revision