WireGuard Installer

WireGuardInstaller.sh

#!/bin/bash

if [ $(whoami) != 'root' ]; then
  echo 'Please run as root'
  exit 1
fi

# install wireguard
apt install resolvconf wireguard wireguard-tools -y

# generate public and private key
cFile='wg0.conf'

cd /etc/wireguard/
umask 0777
wg genkey | tee privatekey | wg pubkey > publickey
touch $cFile
privKey=$(cat /etc/wireguard/privatekey)
echo '
[Interface]
Address = 10.0.0.1/24
PostUp = iptables -A FORWARD -i %i -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE; iptables -A FORWARD -o %i -j ACCEPT
PostDown = iptables -D FORWARD -i %i -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE; iptables -D FORWARD -o %i -j ACCEPT
DNS = 9.9.9.9
ListenPort = 51444
PrivateKey = '$privKey'
' > $cFile

# set permissions
chmod 755 *

# enable wireguard on boot
systemctl enable wg-quick@wg0
wg-quick up wg0
echo 1 > /proc/sys/net/ipv4/ip_forward
echo '[+] Done. Enable IPv4 forwarding'