Skip to main content

WireGuard VPN

WireGuard provides secure admin access to Helsinki2 from Vera and other authorised clients.

Architecture​

Vera (10.200.0.2) ──WireGuard──► CT350 gateway ──► Proxmox internal (192.168.100.x)

Proxmox Host WireGuard Config​

PropertyValue
Interface address10.200.0.1/24
Vera peer10.200.0.2/32
Config file/etc/wireguard/wg0.conf

Vera Access​

Vera connects as 10.200.0.2. From Vera, all internal Helsinki2 nodes are reachable via 192.168.100.x through the tunnel.

SSH Access Patterns​

# From Vera — to Proxmox host
ssh [email protected]

# From Vera — to VM700
ssh [email protected]

# From Proxmox — to VM700
ssh [email protected]

# From Proxmox — to CT320
ssh [email protected]

Adding a New Peer​

On Proxmox host:

# Generate keypair for new peer
wg genkey | tee /tmp/peer_private | wg pubkey > /tmp/peer_public

# Add to wg0.conf
cat >> /etc/wireguard/wg0.conf << EOF
[Peer]
PublicKey = $(cat /tmp/peer_public)
AllowedIPs = 10.200.0.X/32
EOF

wg syncconf wg0 <(wg-quick strip wg0)