technical:wireguard_home_network [igazine.com]

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== Wireguard Home Network ======
//This is pretty darn basic.  I usually build a new system if its local I just include my nugget account during the build.  If its in the cloud at Digital Ocean or some other VPS provider I go through these steps.//

** Step: 1 - SSH to VPS ** 
Basic stuff not much to explain here.
<code>
ssh root@your_server_ip
</code>

** Step: 2 - Build your standard user account ** 
My user name is nugget... You can just use your first name.
<code>
adduser nugget
</code>

Then add yourself to the sudo users group
<code>
usermod -aG sudo nugget
</code>

** Step 3: Load the UFW (Ubuntu Firewall) **
Install the UFW package and permit SSH for your remote access.  Your default build shouldn't have many publicly exposed services but doing this in practice should keep you from loading something that opens external ports without your knowledge.  :!: You should only allow ports to be open that you know and trust.  The "ufw enable" command at the end is important to actually turn on the firewall after you permit SSH.

If you did a local install of Debian (e.g. not in the cloud) you may need to specify SSH during the install or install it manually before doing these steps.

<code>
apt update
apt install ufw

ufw allow OpenSSH

ufw enable
</code>


** Step 4: Copy your SSH Keys to your home directory **
If this is at Digital Ocean you can typically just copy the public keys from roots home to your new user. then make them your own. 

<code>
cp -r ~/.ssh /home/nugget
chown -R nugget:nugget /home/nugget/.ssh
</code>

And that's it folks... That should be your basic up and running.