noxcis / wiregate Goto Github PK

Hello~~ thank you soooo much for the wonderful project. I was facing issues with wirehole but can't resolve and try different hole and it works. However, I'd like to know how I could run it in the background. I ran the installation script but the terminal gets occupied ... I end the ssh connect to the vps and it stops working...

Hi just wanna ask if project is focused towards vpn and dns queries been cached or are is there aim towards something more like casaos?

Just a quick question I don't know if you have heard of netbird but I recently found out on libhunt about it. Would you wanna integrate it or like just use simple wireguard + wg-dashboard.

Any plans on making docker image for providing updates?

I'm running this on an oracle vps on ubuntu 20.04 Lts and I encountered this issue before while using worm-hole as well, but back then the installer let me set the server ip manually which helped me get it working.

I ran the installer script in both deploy modes, but neither figured out the ip correctly and neither let me set it manually.

I saw that there's change in unbund config, having a custom one. So I performed a DNS leak test, I though should it be not your public IP?

I can access WGDashboard outside network with default admin admin credentials.
This is potentially unsafe if You can access web panel outside local network.
I think it would be better if you could access web panel only if you connected to a peer like in wirehole.

I installed this docker image by your instructions on a clean Debian installation.

#!/bin/bash
git  clone  https://github.com/NOXCIS/Worm-Hole.git
cd  Worm-Hole
chmod  +x  install.sh
# I chose automatic install
sudo  ./install.sh
sudo docker-compose up

Yubikey 2fA wanted to create the perfect 3FA auth system for Web Apps.

• Wireguard Client Config <--first layer
• User Name & Password <--second layer
• Yubikey Auth for WG-Dashboard and Channels Messenger

We are AdguardHome users and I use their DHCP Server and have it pre-configured for everythign already, and found that to fit our needs more specifically. Would you be willing to make that an option in lieu of PiHole?

Thanks for the proj.
How I can change Upstream DNS server from cloudflare 1.1.1.1 to 1.1.1.3 or any other DNS server in Unbound configuration.

There's a typo in the Members zone. In several places it's labeled as "Memebers", including the Dashboard.

Can I still point to my local server IP as DNS in my router?

With the kraken release, when trying to run the install.sh, the install_requirements function loops then the installer exits. I removed the function from the install.sh and installer proceeded ok. It looks like maybe the docker install function is looping despite docker packages being installed. The issue seems to persist regardless of whether basic/advanced and pihole/adguard options selected.

First of all, great work on this stack.

This is more of a question than an issue.

Is it possible to have a wireguard connection (torguard for example) for sending all traffic that goes from the server?

The use case in the github page says, " VPN Splitter - Wiregate can be used to extend the number of clients allowed by any VPN service provider by using your Wiregate machine as a hub".

I couldn't find any other documentation if this is the feature i"m looking for.

If this is the same ask, can someone give me some insight on how I can configure a wireguard connection in this stack?

Thanks in advance,
amp

If installing Wiregate on a Linux machine with already swapfile exists it will exit and not continue with installation steps byeond the OS requirmenets.

It is here in the code

There should be a better way to handle this situation

More automation and demonization will be done with version morray.

Hello,

./install.sh ad-exp command install pihole instead of adguard.

if you select adguard using ./install.sh menu, it install adguard home but gives (express install) a random password or username that doesn't work.

i used your script when it was named worm-hole. it worked perfectly. today I tried to setup this for a friend of mine at got above issues. thanks

.

I have Worm-Hole running on a fresh Debian VM with nothing else but it's dependencies. The settings I picked during setup were all the defaults. It works great, however each time either the wg_dashboard container is restarted or the entire VM is rebooted, the peer settings are wiped from wg0.conf. The interface settings themselves remain intact in the config file even after changing them and rebooting.

As well as that, after a restart the wg0 interface doesn't start until it's toggled on manually via the dashboard or command line.

Any clues how to fix this?

Tracking issue for:

• https://github.com/NOXCIS/Worm-Hole/security/code-scanning/68

First of all I'm pretty inexperienced with linux etc so I'm sorry if this is somehow my fault :/

Here's what I did

First I installed docker and I set it up to run as root.

Then I installed Worm-hole using the install.sh script (in auto mode, but I also tried manual) on an oracle vps running [Canonical-Ubuntu-22.04-2023.06.30-0] on x64 cpu

Checking with docker ps looks like this https://i.imgur.com/XxifEd8.png
and checking trough portainer (which I'm slightly more familiar with compared to interacting with docker trough the cli) for the container logs on the wg_dashboard container shows it generating new master keys once a minute, but there's no errors or anything extra being printed https://imgur.com/a/UQUMpnM

I also tried to set this up trough portainers custom templates using the compose.yml and ran into the same issue

any solution to get this running would be nice and I can provide more info if necessary

I'm finding a number of obstacles using the Custom PreConfigured Install option.

First, the readme is outdated so I found the correct command from install.sh.

Second, running any of the valid options, e.g. sudo ./install.sh pi-predef-dwire ignores items in the Global-Configs/WireGate-Deploy-ENV/wiregate.env file, like the WG_DASH_USER or WG_DASH_PORT_RANGE_START.

Third, the resulting install generates a faulty master key, omitting the port for the peer endpoint.

Finally, a related question—what's the best way to keep things updated. Typically I'd run docker compose pull && docker compose up -d --remove-orphans however it seems like the substitutions taking place in the docker-compose file mean I need to run the install script again. But will that keep my custom settings and passwords or do I have to enter them each time? That's the main reason I started looking at the preconfigured install, but if there's a better way I'm happy adopt it.