wireguard_server.yaml

All examples

Change addresses, credentials, certificate paths, and other deployment-specific values before use. This is a complete source file, not a guarantee it can run unchanged on your machine. Read its comments for prerequisites, then run shoes check with the adapted file.

# Demonstration keys only. Generate new keys before deployment and exchange public keys.
- address: "0.0.0.0:51820"
  protocol:
    type: wireguard
    wireguard_name: gateway
    private_key: "KSkpKSkpKSkpKSkpKSkpKSkpKSkpKSkpKSkpKSkpKSk="
    addresses: ["10.77.0.1/32", "fd77::1/128"]
    peers:
      - public_key: "B6r/Pp/BZydVRPTDpqF82Dfy7G54zYpXsePfs8wDWnY="
        allowed_ips: ["10.77.0.2/32", "fd77::2/128"]
  rules:
    - masks: ["127.0.0.0/8", "::1/128", "169.254.0.0/16", "fe80::/10"]
      action: block
    - masks: ["0.0.0.0/0", "::/0"]
      action: allow

View source at this revision