vpn-setup
VPN Setup guides you through deploying WireGuard, OpenVPN, and managed VPN solutions like Tailscale for encrypted remote access and network-to-network tunneling. It covers server configuration, client setup, peer management, and cloud VPN integration with practical scripts and security hardening.
VPN Setup helps you deploy WireGuard, OpenVPN, or Tailscale for secure remote employee access and site-to-site connectivity.
AI-generated summary based on this skill's SKILL.md
Install
BagelHole/DevOps-Security-Agent-Skills/vpn-setup · repository language: Shell
git clone https://github.com/BagelHole/DevOps-Security-Agent-Skills
cp -r DevOps-Security-Agent-Skills/security/network/vpn-setup ~/.claude/skills/vpn-setupnpx skillfed install BagelHole/DevOps-Security-Agent-Skills/vpn-setupFrequently asked questions
AI-generated answers based on this skill's SKILL.md and metadata
How do I set up WireGuard VPN on a Linux server?
VPN Setup provides step-by-step guidance for deploying WireGuard on Linux servers, including key generation, peer configuration, and network interface setup. The skill covers server initialization, client peer addition, and firewall rules needed to establish encrypted tunnels. You'll learn to manage WireGuard's minimal configuration files and optimize performance for your deployment scale.
What's the process to configure OpenVPN server on Linux?
VPN Setup walks you through OpenVPN server configuration on Linux, including certificate generation with easy-rsa, server.conf setup, and client profile creation. The skill covers TLS encryption setup, network routing, and integration with authentication systems. You'll also learn certificate renewal procedures and security hardening practices for production deployments.
How can VPN Setup help with site-to-site VPN connectivity?
VPN Setup guides you through establishing secure site-to-site VPN connections between networks using WireGuard or OpenVPN. It covers network topology planning, peer configuration across sites, routing table setup, and failover strategies. The skill includes cloud VPN integration examples and data center connectivity patterns for multi-location deployments.
How do I troubleshoot VPN connection and performance issues?
VPN Setup provides diagnostic techniques for identifying connection failures, latency problems, and throughput bottlenecks. The skill covers log analysis, packet inspection tools, MTU troubleshooting, and encryption overhead assessment. You'll learn to verify peer connectivity, check firewall rules, and optimize tunnel parameters for your network conditions.
What managed VPN solutions does VPN Setup cover?
VPN Setup includes guidance on Tailscale and other managed VPN platforms that simplify deployment without manual server management. The skill covers mesh VPN architecture, zero-trust networking principles, and integration with existing infrastructure. You'll learn when managed solutions are preferable to self-hosted WireGuard or OpenVPN deployments.
How does VPN Setup secure remote employee access?
VPN Setup explains setting up secure VPN tunnels for remote employees, including client configuration, certificate management, and access control. The skill covers split tunneling options, multi-factor authentication integration, and monitoring remote connections. You'll learn best practices for employee onboarding and offboarding in VPN systems.
SKILL.md
rendered from the published skill — quoted content, verbatim
VPN Setup
Configure secure VPN tunnels for remote access and site connectivity.
When to Use This Skill
Use this skill when: - Setting up secure remote access for employees or contractors - Connecting on-premises networks to cloud environments (site-to-site) - Encrypting traffic between data centers or regions - Implementing a mesh VPN for distributed infrastructure - Providing secure access to internal services without exposing them publicly
Prerequisites
- Linux server with a public IP for VPN endpoint
- Root/sudo access on the VPN server
- Firewall rules allowing VPN traffic (UDP 51820 for WireGuard, UDP 1194 for OpenVPN)
- DNS configured for VPN hostname (optional but recommended)
- Understanding of IP subnetting and routing
WireGuard
Server Setup
```bash
Install WireGuard (Ubuntu/Debian)
apt update && apt install -y wireguard
Generate server keys
wg genkey | tee /etc/wireguard/server_private.key | wg
(truncated - see the full file via the links below)
Read as markdown · JSON record · Browse the source repository
File tree — 1 file
security/network/vpn-setup/SKILL.md