wireguard_server.yaml

所有示例

使用前请修改地址、凭据、证书路径和其他部署相关的值。这是完整的源文件，但不保证未经修改即可在你的机器上运行。请阅读文件中的注释了解前置条件，然后对修改后的文件运行 shoes check。

examples/wireguard_server.yaml

# Demonstration keys only. Generate new keys before deployment and exchange public keys.
- address: "0.0.0.0:51820"
  protocol:
    type: wireguard
    wireguard_name: gateway
    private_key: "KSkpKSkpKSkpKSkpKSkpKSkpKSkpKSkpKSkpKSkpKSk="
    addresses: ["10.77.0.1/32", "fd77::1/128"]
    peers:
      - public_key: "B6r/Pp/BZydVRPTDpqF82Dfy7G54zYpXsePfs8wDWnY="
        allowed_ips: ["10.77.0.2/32", "fd77::2/128"]
  rules:
    - masks: ["127.0.0.0/8", "::1/128", "169.254.0.0/16", "fe80::/10"]
      action: block
    - masks: ["0.0.0.0/0", "::/0"]
      action: allow

查看此修订版本的源文件