wg-easy client setup

Client setup wg-easy/Wireguard

Import the provided configuration to the VPN settings on your client machine.

How? Please look up the documentation for Wireguard VPN on your client machine’s operating system.

I’ve provided the documentation for Gnome on Linux below since that’s what I use, pull requests to add other desktop environments and platforms are welcome! This documentation is in the Momod-docs repository.

With the connection imported and activated you should see a change to the client display in wg-easy indicating that the connection is active and data being transferred. You can also ping the wg-easy container to check that it’s working.

ping 10.10.0.1

If Wireguard is working you should be able to access the Minetest server.

Wireguard client set up on Linux

Gnome Desktop

There is no easy GUI import option but it’s simple to import the configuration from the command line and once imported the VPN can be easily toggled on and off from the Gnome User menu in the top right corner of your screen.

Assuming you are a user called Alice and you’ve downloaded the configuration file Alice.confto ~/Downloads you can import with the following command:

nmcli connection import type wireguard file ~/Downloads/Alice.conf

Obviously you’ll need to adjust the conf file name and path to your own situation.

You’ll need to make some changes to the connection either via the Gnome Network settings GUI or via the command line.

  • Rename the connection to the name of the service you’re accessing and/or the server so its makes sense to you. Under the ‘Wireguard’ panel edit Connection Name.
  • You may not want it to auto-connect. Under the ‘Details’ panel toggle “Connect automatically” to off if desired.
  • To prevent Network Manager setting this connection as a default route for all traffic, go to the ‘IPv4’ panel and at the bottom under Routes toggle “Use this connection only for resources on its network” to on. Failure to do this will mean all traffic is routed through the VPN – everything but the Minetest servers will be blocked!

To do this via the command line, assuming that you rename the connection to “Minetest”:

nmcli connection modify Alice connection.id "Minetest"
nmcli connection modify Minetest connection.autoconnect no
nmcli connection modify Minetest ipv4.never-default true

Now you’re ready to access the Minetest server.