Create a FREE, PRIVATE, VPN with WireGuard - How To

How to Create a VPN Using WireGuard

Step 1: Set Up WireGuard Container

1. Visit the containers website mentioned in the video to access the WireGuard container.
2. Specify the hostname for your WireGuard service (e.g., yourdomain.com).
3. Configure optional settings as per your preference.
4. Set a password for WireGuard, which is generated when creating a new user.
5. The container provides a web GUI for managing users easily.
6. Define an external port for the container (recommended to keep it as 51820 externally).
7. Specify the default IP range for clients connecting to the server.
8. Set the allowed internal network IPs that WireGuard clients can connect to (e.g., your home lab's IP range).

Step 2: Configure Permissions and Docker

1. Ensure the container has the necessary permissions by adding the net admin and sys modules.
2. Use a Docker compose file for setting up the container.
3. Adjust the volume mount with your username for configuration.

Step 3: Access WireGuard GUI

1. SSH into your Docker server.
2. Access the WireGuard GUI on port 51821.
3. Secure the GUI with a username and password to prevent unauthorized access.

Step 4: Add Clients and Configure Devices

1. Add clients by storing their keys securely.
2. Clients can connect to the VPN using the WireGuard app on Windows, Linux, or mobile devices.
3. Generate a QR code or download the configuration file for clients to import into the WireGuard app.

Step 5: Configure Firewall and Router

1. Forward traffic on port 51820 to the IP address of your Docker VM.
2. Optionally, route traffic through a proxy like Traefik by setting up a UDP entry point.
3. Specify the territories allowed to access the VPN for added security.

Step 6: Connect to VPN

1. Download and open the WireGuard app on your device.
2. Import the configuration via QR code or file.
3. Verify the connection details and toggle to start using the VPN.
4. Change the DNS name for the WireGuard server for proper functionality.

Step 7: Manage Access and Security

1. Ping internal services remotely as if you were locally connected.
2. Implement network policies to restrict access for different users.
3. Customize access for other users based on your requirements.

By following these steps, you can create a secure VPN using WireGuard to remotely access your home lab services and provide secure connections for yourself and others.