mirror of https://github.com/ben-grande/qusal.git synced 2024-12-13 18:04:36 -05:00

History

Ben Grande 56a4296421 fix: skip YUM weak dependencies installation Fixes: https://github.com/ben-grande/qusal/issues/96		2024-08-16 14:03:58 +02:00
..
files	fix: avoid echo usage	2024-08-06 18:15:24 +02:00
clone.sls	refactor: initial commit	2023-11-13 14:33:28 +00:00
clone.top	refactor: initial commit	2023-11-13 14:33:28 +00:00
configure.sls	fix: clean Wireguard rules	2024-06-19 15:08:03 +02:00
configure.top	refactor: initial commit	2023-11-13 14:33:28 +00:00
create.sls	fix: clean Wireguard rules	2024-06-19 15:08:03 +02:00
create.top	refactor: initial commit	2023-11-13 14:33:28 +00:00
init.top	refactor: initial commit	2023-11-13 14:33:28 +00:00
install.sls	fix: skip YUM weak dependencies installation	2024-08-16 14:03:58 +02:00
install.top	refactor: initial commit	2023-11-13 14:33:28 +00:00
README.md	doc: lint markdown files	2024-07-04 17:27:31 +02:00
version	fix: generate RPM Specs for Qubes Builder V2	2024-06-21 17:00:06 +02:00

README.md

sys-wireguard

Wireguard VPN in Qubes OS.

Description
Installation
Usage
Credits

Description

Setup a Wireguard VPN qube named "sys-wireguard" to provide network access to other qubes through the VPN with fail closed mechanism.

Installation

Top:

sudo qubesctl top.enable sys-wireguard
sudo qubesctl --targets=tpl-sys-wireguard,sys-wireguard state.apply
sudo qubesctl top.disable sys-wireguard

State:

sudo qubesctl state.apply sys-wireguard.create
sudo qubesctl --skip-dom0 --targets=tpl-sys-wireguard state.apply sys-wireguard.install
sudo qubesctl --skip-dom0 --targets=sys-wireguard state.apply sys-wireguard.configure

Usage

Use the VPN qube sys-wireguard to enforce incoming and outgoing connections from clients connected to the VPN with a fail safe mechanism.

To start using the VPN:

Copy the Wireguard configuration you downloaded to sys-wireguard and place it in /home/user/wireguard.conf.
Run from Dom0 to apply Qubes Firewall rules: qvm-wireguard

Credits

Unman