Configuring the Client

You need a few pieces of information to configure the client and server. This documentation is just for the client side.

Install wireguard-tools
```
sudo apt-get install wireguard-tools
```

Start with a basic Wireguard template, save as wg0.conf

[Interface]
PrivateKey = <Client Private Key from Step 2>
ListenPort = 51820
Address = 192.168.50.<NEXT FREE IP>/24
DNS = 192.168.1.1 #DNS Server available to the network

[Peer]
PublicKey = <Tunnel Public Key from Wireguard Server>
AllowedIPs = 192.168.50.0/24, 192.168.3.0/24, 192.168.1.0/24 # Comma delimited list of networks/hosts to give client routes to
Endpoint = <Wireguard Public IP Endpoint>:51820

Generate a public and private key. This can be done on any system that has "wireguard-tools" installed
```
wg genkey | tee privatekey | wg pubkey > publickey
```
The private key goes to the client, the public key goes to the Wireguard server configurations. See the Configuring PFSense section for details on where to use this Public Key.
In Ubuntu's case, you must link the resolvectl binary to the resolvconf binary that wg-quick assumes is used.
```
sudo ln -s /usr/bin/resolvectl /usr/local/bin/resolvconf
```

To test the configuration:

wg-quick up ./wg0.conf
ping <internal resource listed in the AllowedIPs section>
ip route # Look for routes that go through wg0 interfaces
wg-quick down ./wg0.conf

Make the configuration persistent on the client: Then move your configuration file to the /etc/wireguard/ directory to enable an auto startup of the VPN on system boot.
```
sudo mv ./wg0.conf /etc/wireguard/wg0.conf
sudo systemctl enable wg-quick@wg0.service
sudo systemctl daemon-reload
sudo systemctl start wg-quick@wg0
```