Need Help?

Need help to install or setup this app? We are available on:

Discord

Setting Up WireGuard

Setting Up WireGuard on Nébulaura

WireGuard is a fast, modern, and secure VPN solution utilizing state-of-the-art cryptography.

Initial Setup

First, connect to your slot via SSH. If you need help connecting to the server, refer to the relevant help article.

To install WireGuard, use the following command:

box install wireguard

This command will configure WireGuard for your user. Once installation is complete, the configuration for your user will be output. Below is an example configuration:

[Interface]
Address = 10.100.0.2
PrivateKey = {averysecretkey}
ListenPort = 21841

[Peer]
PublicKey = {apublickey}
Endpoint = {shared/dedicated IP}:{port}
AllowedIPs = 0.0.0.0/0

# This is for if you're behind a NAT and
# want the connection to be kept alive.
#PersistentKeepalive = 25

How to Access

Client Installation

To use the WireGuard tunnel, you’ll need to install a client on your local computer or mobile device. Visit the WireGuard site for detailed installation instructions for your operating system.

Note: An alternative client called TunSafe exists and may be more feature-rich for Windows users. However, this client is not developed by the WireGuard team. Use it at your own risk.

Client Setup

Linux / macOS

  1. Copy the configuration file output during the server setup into /etc/wireguard:
    sudo nano /etc/wireguard/wg0.conf
sudo chmod 600 /etc/wireguard/wg0.conf
sudo wg-quick up wg0
  2. Verify your IP address to confirm traffic is routed through your Nébulaura slot.
  3. Optionally, configure WireGuard to start on boot:
    sudo systemctl enable wg-quick@wg0

Windows

  1. Save the client configuration output during the setup as a .conf file (e.g., Nébulaura.conf).
  2. Open TunSafe and drag the configuration file into the TunSafe window.
  3. TunSafe will automatically import and connect using the configuration.
  4. Verify your IP address to confirm traffic is routed through your Nébulaura slot.

Android

  1. Generate a QR code for the configuration on your server: 
    u=$(whoami)
qrencode -t ansiutf8 < ~/.wireguard/$u.conf
  2. Open the WireGuard app on your phone and add a new tunnel using the QR Code option.
  3. Scan the QR code from your terminal.
  4. Enable the tunnel and verify your IP address.

iOS

  1. Generate a QR code for the configuration on your server: 
    u=$(whoami)
qrencode -t ansiutf8 < ~/.wireguard/$u.conf
  2. Open the WireGuard app on your iPhone and add a new tunnel using the QR Code option.
  3. Scan the QR code from your terminal.
  4. Enable the tunnel and verify your IP address.

Service Management

As with all Nébulaura-configured applications, WireGuard can be managed via SSH using the following commands:

  • Status: Check the current status of WireGuard.
  • Start: Start the WireGuard service.
  • Stop: Stop the WireGuard service.
  • Restart: Restart the WireGuard service.
  • Enable: Configure WireGuard to start automatically at boot.
  • Disable: Prevent WireGuard from starting at boot.

Example:

box start wireguard

Secure Your Connection with WireGuard

With WireGuard on Nébulaura, you can ensure fast and secure VPN connectivity. Set it up today for a modern and reliable VPN experience.