friwall/web/templates/vpn/wg-fri.conf

[Interface]
# {{ timestamp }} {{ user }} {{ name }}
# PublicKey = {{ pubkey }}
PrivateKey = # paste private key here
Address = {{ ip }}{% if ip6 %}, {{ ip6 }}{% endif %}
{%- if dns %}
DNS = {{ dns }}
{%- endif %}

[Peer]
Endpoint = {{ server }}:{{ port }}
PublicKey = {{ server_key }}
PersistentKeepalive = 25
{%- for net in allowed_nets.split() %}
AllowedIPs = {{ net }}
{%- endfor %}
{% if add_default -%}
AllowedIPs = 0.0.0.0/0
AllowedIPs = ::/1, 8000::/1
{%- endif %}
Make a squash 2022-01-03 10:33:02 +00:00			`[Interface]`
vpn: add support for custom keys Custom keys are created by admin and specify networks directly, bypassing AD permissions. They are intended to join managed devices into networks where users are not allowed to create keys themselves. Also comprehend a set directly. 2024-07-30 08:53:57 +00:00			`# {{ timestamp }} {{ user }} {{ name }}`
Make a squash 2022-01-03 10:33:02 +00:00			`# PublicKey = {{ pubkey }}`
			`PrivateKey = # paste private key here`
vpn: configure IPv6 addresses for WG clients 2023-12-04 09:23:41 +00:00			`Address = {{ ip }}{% if ip6 %}, {{ ip6 }}{% endif %}`
Parametrize wg.conf template 2023-09-15 11:59:04 +00:00			`{%- if dns %}`
			`DNS = {{ dns }}`
			`{%- endif %}`
Make a squash 2022-01-03 10:33:02 +00:00
			`[Peer]`
			`Endpoint = {{ server }}:{{ port }}`
			`PublicKey = {{ server_key }}`
			`PersistentKeepalive = 25`
Parametrize wg.conf template 2023-09-15 11:59:04 +00:00			`{%- for net in allowed_nets.split() %}`
			`AllowedIPs = {{ net }}`
			`{%- endfor %}`
wg-fri.conf: keep standard AllowedIPs even when allowing all traffic So it is easier to change later if needed. 2023-04-06 08:19:35 +00:00			`{% if add_default -%}`
			`AllowedIPs = 0.0.0.0/0`
vpn: add default route for IPv6 in wg.conf template Applied when selected during key creation. Cleave ::/0 in twain for the whole thing sometimes works not. 2024-09-20 04:18:12 +00:00			`AllowedIPs = ::/1, 8000::/1`
Make a squash 2022-01-03 10:33:02 +00:00			`{%- endif %}`