ansible-infra/docs/guides/wiregueard-admin-vpn.md

1.6 KiB

title summary
Wiregard Admin VPN How to configure your Wireguard client to access the Z9 network

Onboarding

tbd. where to add your key

Local Client Configuration

Example Config

Replace YOUR_IP_IN_DEC with your IP in decimal, and YOUR_IP_IN_HEX with your IP in hexadecimal.

[Interface]
PrivateKey = YOUR_PRIVATE_KEY
Address = 10.89.214.YOUR_IP_IN_DEC/32, 2a07:c481:1:37::YOUR_IP_IN_HEX

[Peer]
PublicKey = fmlxjh3iOfpgrHQQpK3dyOD0BvDppGCUkFuMSroqQR4=
AllowedIPs = 10.89.208.0/20, 2a07:c481:1::/48, 212.12.48.126/32, 2a00:14b0:42:100::/56, 2a00:14b0:4200:3000::/64
Endpoint = rt-wan.ccchh.net:51820

AllowedIDs

The following prefixes should be tunneled to gain access to both CCCHH Z9 resources as well as Chaosknoten. It is also possible to run a default route through wireguard, but please do not abuse this as a general VPN for purposes other than admin tasks.

Prefix Description
10.89.208.0/20 prefix for CCCHH Z9 local networks
2a07:c481:1::/48 prefix for CCCHH Z9 local networks
212.12.48.126/32 public IP of chaosknoten
2a00:14b0:4200:3000::126:1/128 public IP of chaosknoten
2a00:14b0:42💯:/56/128 new IPv6 for VMs on chaosknoten
2a00:14b0:4200:3000::/64 old IPv6 for VMs on chaosknoten