Wireguard client o on TrueNAS scale

[sfatula]

Strange, there's so many little intricacies with Wireguard configs. Glad you got it running, I was out of ideas. I know I got mine to work for my scenario behind CGNat in the manner I needed it, but it doesn't always easily translate. Different networks with different routes, etc. It's nice though to not even need an app for that.

 

[Turnspit]

Can confirm, it's really nice not needing an app for it (like it used to be with OpenVPN, or for Core).

Since WIreguard is already baked into the system itself, it would be lovely to have a native UI-option for handling it, since there's still no (more) 'official' VPN-client out there for Scale.

 

[DocLE]

hi,
I'm trying to setup also a connection to an exisiting wireguard server on a vps. Unfortunatly I can't figure it out to get wg-easy get's startet with my exisiting wg0.conf.

Here is my current app-config:

I also tried to mount only the path not the file, but the server everytimes tries to save the server settings in the wg0.conf

Code:

2024-02-03 12:48:59.459901+01:002024-02-03T11:48:59.458Z Server Listening on http://0.0.0.0:30058
2024-02-03 12:48:59.460885+01:002024-02-03T11:48:59.460Z WireGuard Loading configuration...
2024-02-03 12:48:59.462630+01:00$ wg genkey
2024-02-03 12:48:59.472269+01:00$ echo ***hidden*** | wg pubkey
2024-02-03 12:48:59.475701+01:002024-02-03T11:48:59.475Z WireGuard Configuration generated.
2024-02-03 12:48:59.475914+01:002024-02-03T11:48:59.475Z WireGuard Config saving...
2024-02-03 12:48:59.479272+01:00[Error: EACCES: permission denied, open '/etc/wireguard/wg0.json'] {
2024-02-03 12:48:59.479290+01:00errno: -13,
2024-02-03 12:48:59.479298+01:00code: 'EACCES',
2024-02-03 12:48:59.479305+01:00syscall: 'open',
2024-02-03 12:48:59.479312+01:00path: '/etc/wireguard/wg0.json'
2024-02-03 12:48:59.479319+01:00}

Any advises how to prevent this and start in client mode?

Thanks
Jan

 

[Turnspit]

wg-easy is not designed to run in "client-mode", it's rather a "server" so to speak of, albeit Wireguard practically not working that way.

If you want to add your TN machine as a "client" to an existing network (like myself), either use the builtin wireguard-client or try your luck with the Truecharts wireguard app.

 

[ericnotthered]

I'm hoping that someone in this thread can help me.

I was looking to set up a Wireguard VPN client connection to AirVPN. I downloaded a .conf file from their site and ran the wg-quick command from the console to start it:

Code:

wg-quick up ./wg10.conf

Unfortunately, I did not realize that this would make my local http access to the server unavailable. I am able to access the console using a keyboard and monitor and it reports the same local IP address for GUI access, but that URL is not accessible. None of the web apps are accessible. Console output also seems to indcate that apps are not able to reach each other through their local IP address.

I have tried taking down the Wireguard VPN using:

Code:

wg-quick down ./wg.conf

This seems to run successfully, however my local http access is not restored. I've tried rebooting after running this command and it doesn't help.

I also tried restoring a backup created using HeavyScript. This didn't work either, as access via the local IP is still not working.

Clearly I shouldn't have been playing with this without fully understanding it. I'd appreciate if anyone could help me.