VPNs

WireGuard

sudo apt install -y wireguard

wg-quick(8)

wg-quick [ up | down | save | strip ] [ CONFIG_FILE | INTERFACE ]

This is an extremely simple script for easily bringing up a WireGuard interface, suitable for a few common use cases.

Use up to add and set up an interface, and use down to tear down and remove an interface. Running up adds a WireGuard interface, brings up the interface with the supplied IP addresses, sets up mtu and routes, and optionally runs pre/post up scripts. Running down optionally saves the current configuration, removes the WireGuard interface, and optionally runs pre/post down scripts. Running save saves the configuration of an existing interface without bringing the interface down. Use strip to output a configuration file with all wg-quick(8)-specific options removed, suitable for use with wg(8).

Tailscale

Admin Console

curl -fsSL https://tailscale.com/install.sh | sh

LXC Containers¹

lxc.cgroup2.devices.allow: c 10:200 rwm
lxc.mount.entry: /dev/net/tun dev/net/tun none bind,create=file

resolv.conf²

tailscale up --accept-dns=false

touch /etc/.pve-ignore.resolv.conf