How To Create Your Own WireGuard VPN Server Using An Ubuntu Linux VPS

In this video, I will guide you through the complete process of setting up your very own WireGuard Virtual Private Network (VPN) server on a Linux Virtual Private Server (VPS) also known as a cloud server. WireGuard is a cross-platform opensource VPN that utilises cryptography in its protocol. DigitalOcean will be the server host provider used in this video demonstration. It offers cloud servers through a service called Droplets. To install WireGuard VPN on our VPS we will use a bash shell installation script hosted on GitHub by Nyr called wireguard-install.

Steps To Setup WireGuard VPN Server On An Ubuntu Linux VPS:
2. Once you have created your DigitalOcean account, you will be taken to your DigitalOcean dashboard. Hover over Create.
3. Click Droplets
4. Create and configure your droplet and then click Create Droplet
6. On your DigitalOcean dashboard copy your droplets IP address by clicking on Copy to the right hand side of your droplets IP address.
8. Once PuTTY has been installed, open up the PuTTY SSH client and paste in your droplets IP address into the Host Name (or IP address) section
9. Click Open
10. In the PuTTY command line terminal, login as root by typing the word root and hitting Enter on your keyboard
11. Next, type in your root password that you created for your droplet and hit Enter on your keyboard. You will now be logged into your droplet
13. Highlight and copy the wireguard-install script command which you can also find below:

14. Right click to paste in the above WireGuard script command into your terminal
15. Press Enter on your keyboard to execute the command
16. Follow the WireGuard script installers prompts to configure and install WireGuard on your cloud server. To roll with the defaults, press Enter on your keyboard for each prompt
17. If you're greeted with a purple screen that asks you "Which services should be restarted" then simply press tab on your keyboard followed by Enter.
18. You will now see a WireGuard VPN QR code containing the client configuration. You can scan this using a mobile device with the WireGuard VPN client to import the WireGuard VPN tunnel. If you're using a computer as demonstated in this video, you're going to need to type the following commands to get your client configuration information:

ls

19. Highlight to copy the config info displayed from [Interface] to PersistentKeepalive and everything in between by simply highlighting it in the command line terminal window
20. Open up your WireGuard VPN client, click the arrow next to Add Tunnel and click on Add empty tunnel...
21. Delete the pre typed information, right click and paste in the WireGuard VPN client config info you just highlighted in the terminal. Give your tunnel a name and click on Save
22. Click Activate

[Note] To add a new client for another device you will need to run the wireguard-install script command once again in the terminal.

wireguard-install script defaults:
- IP: VPS IPv4 address
- Port: 51820
- Client name: client
- DNS Server: Current system resolvers

Timestamps:
0:00 - Intro
1:13 - Create The WireGuard VPN Server
3:56 - Install WireGuard VPN Client
5:16 - Login To WireGuard VPN Server Using SSH Client
7:17 - Install WireGuard VPN & Add New Client Config(s) On Server
10:59 - Connect To WireGuard VPN Using The Client (Add Empty Tunnel)
12:21 - Check If WireGuard VPN Is Active
13:07 - Closing

#WireGuard #VPN #DigitalOcean

[truepassion]

Is this safe. Can digital ocean monitor our traffic?

[wetogether]

after root is shhows Access denied what should i do ?

[farshadgh]

I installed wireguard in my ubuntu server, and everything works fine in andriod phones, but my browsers in Windows don't work with wireguard, while windows apps like Telegram etc work fine in Windows, Please help me.

[wanarchives]

In some vps, the port need to be released in firewall....should i open the installed port? cause i can connect to my vpn but no network connections :(

[reindaz]

Nice, but I don't want to pay hosting if I can host at home.

[mangotree]

i should not be able to ping your ip.1:05