Wireguard VPN

[kallados]

@imc67 said in Wireguard VPN:

@girish just for inspiration I found an easy way to configure and manage WireGuard in Docker:

https://github.com/WeeJeWel/wg-easy

This can make the long awaited WireGuard app on Cloudron also easy?

Pretty nice

[dylightful]

The lone survivor

[girish]

@dylightful We just pushed out jitsi last month or so and it's still stabilizing, so you know what's next then

[kallados]

@girish Jitsi? What is this

[robi]

This may be useful for connecting devices/apps via WgVPN - https://github.com/stv0g/wiretrustee

[robi]

Another OSS project that has a nice Wireguard integration - Mistborn
https://gitlab.com/cyber5k/mistborn

[dylightful]

@girish bump

[kallados]

@dylightful Ping ^^

[ApplegateR]

@kallados
https://github.com/ngoduykhanh/wireguard-ui

Pretty neat on this one. Because it already made on web gui.

[marcusquinn]

Even more useful now Contabo has a UK location, we can use this for our Hetzner Gemany hosted VDIs to tunnel out to the web in the UK for a better localised experience for our primarily UK users.

[jdaviescoates]

@marcusquinn said in Wireguard VPN:

we can use this for our Hetzner Gemany hosted VDIs to tunnel out to the web in the UK for a better localised experience for our primarily UK users.

That's sounds interesting, could you please elaborate?

As an aside, Contabo don't use renewable energy, which makes them climate criminals in my mind.

Here are the cheapest renewably powered VPS in UK I've found so far (in order of cheapness)

https://www.vpsserver.com/vps-london/
https://krystal.uk/cloud-vps
https://cloudabove.com/hosting/cloud-servers

[dylightful]

@girish said in Wireguard VPN:

so you know what's next then

Can we please get an update on Wireguard? Seems to be a lot of apps getting published that don't have anywhere near the number of votes as WG....

[girish]

@dylightful Yes, on our list. After 7.2 is completely rolled out (should be out later today).

Is your use case the same as the existing OpenVPN app use case? i.e a self service portal where Cloudron acts as the VPN server?

[marcusquinn]

@girish Our use-case would be using some mini-Cloudrons as relays for traffic from VDIs, so the users appear to be browsing from the country they are in, as opposed to where the VDI VPS is hosted.

[dylightful]

@girish Exactly like the OpenVPN app, Wireguard will provide MUCH better speed!

[timka]

Ok, so this would be an alternative to the avaible OpenVPN App?
Then I suggest a look into firezone, @git it seems like a nice slim manager with gui. But well it's quite new and I do not know about the license.

[marcusquinn]

For interest: ivpn.net comes recommended on privacytools.io with Wireguard very easily implemented and, formerly, I always found the Wireguard speed on azirevpn.com to be very fast.

[dylightful]

@girish said in Wireguard VPN:

After 7.2 is completely rolled out (should be out later today).

Bump

[timka]

A nice list:
https://github.com/HarvsG/WireGuardMeshes

[robi]

An example config of WG-Easy deployment from:
https://github.com/WeeJeWel/wg-easy/wiki/Using-WireGuard-Easy-with-nginx-SSL

docker-compose.yml:

version: "3.8"

services:
  wg-easy:
    environment:
      # ⚠️ Change the server's hostname (clients will connect to):
      - WG_HOST=wg-easy.myhomelab.com

      # ⚠️ Change the Web UI Password:
      - PASSWORD=foobar123
    image: weejewel/wg-easy
    container_name: wg-easy
    hostname: wg-easy
    volumes:
      - ~/.wg-easy:/etc/wireguard
    ports:
      - "51820:51820/udp"
    restart: unless-stopped
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    sysctls:
      - net.ipv4.ip_forward=1
      - net.ipv4.conf.all.src_valid_mark=1

  nginx:
    image: weejewel/nginx-with-certbot
    container_name: nginx
    hostname: nginx
    ports:
      - "80:80/tcp"
      - "443:443/tcp"
    volumes:
      - ~/.nginx/servers/:/etc/nginx/servers/
      - ./.nginx/letsencrypt/:/etc/letsencrypt/

~/.nginx/servers/wg-easy.conf:

server {
    server_name `⚠️wg-easy.myhomelab.com`;

    location / {
        proxy_pass http://wg-easy:51821/;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "Upgrade";
        proxy_set_header Host $host;
    }
}