Configure Linux WireGuard Clients

Base WireGuard Setup

Make sure the WireGuard module is loaded
```
sudo modprobe WireGuard
```

Generate your public/private keys

sudo sh -c 'umask 077; \
mkdir -p /etc/wireguard; \
wg genkey | tee /etc/wireguard/privatekey-$(hostname -s); \
wg pubkey < /etc/wireguard/privatekey-$(hostname -s) > /etc/wireguard/publickey-$(hostname -s)'

Add the WireGuard device

sudo ip link add dev wg0 type wireguard

Setup your configuration file at /etc/wireguard/wg0.conf

[Interface]
PrivateKey = LOCAL_HOST_PRIVATE_KEY

[Peer]
PublicKey = SERVER_PUBLIC_KEY
AllowedIPs = IPS_TO_TUNNEL
Endpoint = SERVER:PORT

NOTE: If you’d like to route all traffic through the VPN, set AllowedIPs to 0.0.0.0/0

Attach your configuration file to your WireGuard device
```
sudo wg setconf wg0 /etc/wireguard/wg0.conf
```

Attach the VPN IP to the WireGuard device

sudo ip address add dev wg0 LOCAL_HOST_VPN_IP/24

Bring up the tunnel
```
sudo ip link set up dev wg0
```
Setup your routing
- if you’d like to route just the VPN network you can simply add the following:
```
sudo ip route add VPN_INTERNAL_NETWORK/24 dev wg0
```
- if you’d like to route all traffic through the VPN, use the following:
```
sudo ip route add 0.0.0.0/1 dev wg0
sudo ip route add 128.0.0.0/1 dev wg0
```

Gnome Toggle Setup

Create toggle script and save to /usr/local/bin/wireguard-toggle

#!/usr/bin/env bash

set -euo pipefail

if ip a | grep -q 'wg0'; then
    for route in $(ip route | grep wg0 | cut -d" " -f1); do
        sudo ip route del ${route}
    done
    sudo ip link set down dev wg0
    sudo ip link del wg0
else
    sudo ip link add dev wg0 type wireguard
    sudo wg setconf wg0 /etc/wireguard/wg0.conf
    sudo ip address add dev wg0 LOCAL_HOST_VPN_IP/24
    sudo ip link set up dev wg0
    sudo ip route add 0.0.0.0/1 dev wg0
    sudo ip route add 128.0.0.0/1 dev wg0
fi 

NOTE: The script assumes you’re in sudoers with NOPASSWD set, if not you can use Zenity to add a password prompt.

Copy the WireGuard icon

mkdir -p ~/.local/share/icons
wget https://richard.gibert.ca/assets/images/wireguard.png -P ~/.local/share/icons

Create the desktop file at ~/.local/share/applications

[Desktop Entry]
Type=Application
Name[en_CA]=WireGuard Toggle
Categories=System;
X-GNOME-FullName[en_CA]=WireGuard
Comment[en_CA]=Toggle WireGuard
Icon=wireguard.png
NoDisplay=false
Exec=bash -c /usr/local/bin/wireguard-toggle
Terminal=false
X-GNOME-UsesNotifications=true

Install WG Indicator