77fa3770cebffbdbad6772239cb03b325d12b693
howto/wireguard.md
| ... | ... | @@ -82,16 +82,14 @@ An example wg-quick script that incorporates the above two workarounds is below, |
| 82 | 82 | [Interface] |
| 83 | 83 | PrivateKey = <your private key> |
| 84 | 84 | Address = <MyIPv4>/32, <MyIPv6>/128 |
| 85 | -PostUp = /sbin/ip addr del dev wg0 <MyIPv4>/32 && /sbin/ip addr add dev wg0 <MyIPv4>/32 peer <PeerIPv4>/32 && /sbin/ip addr del dev wg0 <MyIPv6>/128 && /sbin/ip addr add dev wg0 <MyIPv6>/128 peer <PeerIPv6>/128 |
|
| 85 | +PostUp = /sbin/ip addr del dev wg0 <MyIPv4>/32 && /sbin/ip addr add dev wg0 <MyIPv4>/32 peer <PeerIPv4>/32 |
|
| 86 | +PostUp = /sbin/ip addr del dev wg0 <MyIPv6>/128 && /sbin/ip addr add dev wg0 <MyIPv6>/128 peer <PeerIPv6>/128 |
|
| 86 | 87 | Table = off |
| 87 | 88 | |
| 88 | 89 | [Peer] |
| 89 | 90 | Endpoint = <your peer's wireguard endpoint> |
| 90 | 91 | PublicKey = <your peer's public key> |
| 91 | -AllowedIPs = 172.16.0.0/12 |
|
| 92 | -AllowedIPs = 10.0.0.0/8 |
|
| 93 | -AllowedIPs = fd00::/8 |
|
| 94 | -AllowedIPs = fe80::/10 |
|
| 92 | +AllowedIPs = 172.16.0.0/12, 10.0.0.0/8, fd00::/8, fe80::/10 |
|
| 95 | 93 | ``` |
| 96 | 94 | Use `which ip` to get the full path to your ip binary. |
| 97 | 95 |