swissmakers_gmbh/wireguard-manager
11
0
Fork 0
mirror of https://github.com/swissmakers/wireguard-manager.git synced 2025-07-20 14:20:57 +02:00
Code Issues Packages Projects Releases Wiki Activity

Minor deployment updates to README.md

Browse Source
This commit is contained in:
Swissmakers GmbH 2025-03-04 16:56:57 +01:00 committed by GitHub
parent 35ab899c63
commit 73d7af2fb2
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 16 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
README.md
View File

@ -170,12 +170,18 @@ Below is a step-by-step guide demonstrating how to set up `wireguard-manager` **
firewall-cmd --reload
```
10.1. **Also pre-define the later used rich-rule for VPN traffic from your VPN interface to your LAN**:
```bash
firewall-cmd --permanent --add-rich-rule='rule family="ipv4" source address="10.8.0.0/24" masquerade'
firewall-cmd --reload
```
11. **Build the `wireguard-manager` and chown to right user**:
```bash
cd /opt/wireguard-manager
./prepare_assets.sh
go build -o wireguard-manager
chown -R wireguard:wireguard /opt/wireguard_environment.conf /etc/wireguard/wg0.conf
chown -R wireguard:wireguard /opt/wireguard_environment.conf /opt/wireguard-manager/ /etc/wireguard/wg0.conf
```
12. If you also using SELinux keep that in mind as well. There are some additionals settings needed. (Will be documented later.)
@ -187,6 +193,14 @@ Below is a step-by-step guide demonstrating how to set up `wireguard-manager` **
systemctl status wireguard-manager.service
```
13.1 On SELinux enabled servers it will fail here. You need to do the following:
```bash
restorecon -Rv /opt/
setsebool -P domain_can_mmap_files on
systemctl restart wireguard-manager.service
systemctl status wireguard-manager.service
```
14. **(Optional) Set up watchers for auto-restarting WireGuard**
See [Auto-Restarting WireGuard](#auto-restarting-wireguard) below for details on using `systemd` path units or other methods.
@ -404,4 +418,4 @@ docker compose build \
## License
This project is licensed under the [MIT License](LICENSE).
This project is licensed under the [MIT License](LICENSE).