Compare commits
13 Commits
40a4064ddb
...
98a2a30961
Author | SHA1 | Date | |
---|---|---|---|
98a2a30961
|
|||
6fc42cc949
|
|||
991f4bed90
|
|||
9051d524f6
|
|||
703d0d01e8
|
|||
53b4d0e041
|
|||
fe14e0aacc
|
|||
ed9ef924d3
|
|||
e0be97277a
|
|||
13253824c6
|
|||
26ffee17be
|
|||
f60153aca6
|
|||
7d66d5c55e
|
@@ -1,5 +1,3 @@
|
|||||||
---
|
---
|
||||||
VMID: 114
|
VMID: 114
|
||||||
---
|
---
|
||||||
|
|
||||||
[wiki page](https://wiki.dmz.rs/en/sysadmin/ssh)
|
|
||||||
|
@@ -1,58 +0,0 @@
|
|||||||
---
|
|
||||||
VMID: 103
|
|
||||||
---
|
|
||||||
|
|
||||||
[Wireguard VPN quickstart](https://www.wireguard.com/quickstart)
|
|
||||||
|
|
||||||
Check dmzadmin for `wireguard.gpg` to know who to contact for access
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
### Server config
|
|
||||||
|
|
||||||
New user/client needs to provide their wireguard `publickey` and new ip on the network needs to be assigned (`x`)
|
|
||||||
add next lines to the bottom of the conf file - `/etc/wireguard/wg0.conf`
|
|
||||||
|
|
||||||
```conf
|
|
||||||
[Peer]
|
|
||||||
PublicKey = <client_public_key>
|
|
||||||
AllowedIPs = 192.168.164.x/32
|
|
||||||
```
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
### Client config
|
|
||||||
|
|
||||||
client conf example
|
|
||||||
`x` is the assinged on the server as peer
|
|
||||||
|
|
||||||
```conf
|
|
||||||
|
|
||||||
[Interface]
|
|
||||||
Address = 192.168.164.x/32
|
|
||||||
DNS = 1.1.1.1
|
|
||||||
MTU = 1420
|
|
||||||
SaveConfig = true
|
|
||||||
ListenPort = 51820
|
|
||||||
FwMark = 0xca6c
|
|
||||||
PrivateKey = <your_private_wg_key>
|
|
||||||
|
|
||||||
[Peer]
|
|
||||||
PublicKey = JP2FTHLUujkevz1kUymciLImsx1OX9ViUko7oPAIoiA=
|
|
||||||
AllowedIPs = 192.168.164.0/24, 192.168.1.0/24
|
|
||||||
Endpoint = 77.105.27.232:51820
|
|
||||||
PersistentKeepalive = 21
|
|
||||||
|
|
||||||
```
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
Command to resolve ip clashing with current and wireguard network
|
|
||||||
|
|
||||||
```shell
|
|
||||||
ip route add <ip> dev <wg0>
|
|
||||||
```
|
|
||||||
|
|
||||||
- `ip` you want to resove -> for wireguard vm 192.168.1.10
|
|
||||||
- `wg0` name of the wireguard conf
|
|
||||||
|
|
@@ -1,5 +0,0 @@
|
|||||||
---
|
|
||||||
VMID: 100
|
|
||||||
---
|
|
||||||
|
|
||||||
[wiki page](https://wiki.dmz.rs/en/sysadmin/ssh)
|
|
@@ -1,5 +0,0 @@
|
|||||||
|
|
||||||
#!/bin/bash
|
|
||||||
|
|
||||||
echo $(shuf shared/english.txt | head) | sed "s/ //g"
|
|
||||||
|
|
@@ -56,6 +56,7 @@ Now all the files have 'read, write, and execute', but only for `$USER`.
|
|||||||
Host soft
|
Host soft
|
||||||
HostName soft.dmz.rs
|
HostName soft.dmz.rs
|
||||||
Port 2222
|
Port 2222
|
||||||
|
User ghost
|
||||||
IdentityFile ~/.ssh/id rsa
|
IdentityFile ~/.ssh/id rsa
|
||||||
Host dmz
|
Host dmz
|
||||||
HostName dmz.rs
|
HostName dmz.rs
|
||||||
|
Reference in New Issue
Block a user