WireGuard Autoconfig for Digital Ocean Cloud Provider

Wireguard VPN Automated Setup Scripts (for Ubuntu Droplets)

Digital Ocean droplets need some additional configuration to get WireGuard up and running as expected.

Here is how we do that:

Installation

Install dependencies:

sudo apt-get update && sudo apt-get install -y wireguard qrencode resolvconf git

Continue as root:

sudo su

Download and install these scripts ( Huge thanks to @ugurrdemirel and @vaughngx4):

cd /etc/wireguard
git clone https://github.com/kmarf/wireguard-DO-cloud-install.git
mv wireguard-DO-cloud-install/* ./
rm -rf wireguard-DO-cloud-install

Generate the config(follow the prompts, this will not start the server):

./wireguard-autoconfig.sh

A reboot is needed at this point. Answer 'y' to the reboot prompt to reboot.

Once you've reconnected to the instance, add a peer and start the server:

sudo su
cd /etc/wireguard
./add-peer.sh

You can use the qr code that is ouput to the terminal or copy the configuration from /etc/wireguard/peerX('X' being the peer number). The add-peer.sh script will automatically restart the server to apply changes. To add another peer, simply run the script again. Peer configs can found in folders inside /etc/wireguard/ starting with folder name peer2(the peer number corresponds with the peer's IP address).

That's it, you can now connect to the VPN using the auto generated configs :)

Please Note:

• The wireguard kernel mod ships with the latest Ubuntu image on Digital Ocean
• The image used for testing is Ubuntu 22.04 Minimal
• All scripts must be run as root.