# Linux Client

# Manual Configuration

Run the following commands to generate a keypair for your client:

sudo su
cd /etc/wireguard
umask 077
wg genkey > privatekey
wg pubkey < privatekey > publickey

Create a file at /etc/wireguard/wg0.conf using the template below. wg0 will be the name of your WireGuard tunnel interface on your client machine. If you pick a different name, substitute it for every instance of wg0.

For each #comment, edit the following line using the instructions provided.

[Interface]
# Paste contents of /etc/wireguard/privatekey here
PrivateKey = <private_key_here>

# Use IP Addresses from Hoppy
Address = <ipv4_here>, <ipv6_here>

[Peer]
# Use Server Key from Hoppy
PublicKey = <server_public_key_here>

# Use Endpoint from Hoppy
Endpoint = <endpoint_here>

AllowedIPs = ::/0, 0.0.0.0/0
PersistentKeepalive = 55

Now print out your public key to the terminal:

cat publickey

Copy the displayed public key. On the Modify Interface page, paste your key into the "Client Public Key" section. You may have to click the "Clear Private Key" button before doing so.

It usually takes around 2 minutes for the client public key changes to propagate, but it can take up to 15 minutes.

# Starting the Interface

To start the WireGuard interface, run:

sudo wg-quick up wg0

To make the interface auto-initialize on boot, run:

sudo systemctl enable wg-quick@wg0