homelab-wireguard-vpn
Deploy a WireGuard VPN server to securely access your home network remotely from phones and laptops. This skill covers server setup on Linux and pfSense, keypair generation, client configuration, and routing choices like split tunneling for home-only traffic or full tunnel for all internet through your home connection.
Homelab WireGuard VPN sets up a fast, modern VPN server for secure remote access to your home network from mobile and laptop clients.
AI-generated summary based on this skill's SKILL.md
Install
affaan-m/ECC/homelab-wireguard-vpn · repository language: JavaScript
git clone https://github.com/affaan-m/ECC
cp -r ECC/skills/homelab-wireguard-vpn ~/.claude/skills/homelab-wireguard-vpnnpx skillfed install affaan-m/ECC/homelab-wireguard-vpnFrequently asked questions
AI-generated answers based on this skill's SKILL.md and metadata
How do I configure WireGuard server on Linux for home network access?
homelab-wireguard-vpn guides you through setting up a WireGuard VPN server on Linux to enable secure remote access to your home network. The skill covers installing WireGuard, generating server keypairs, configuring the interface with IP forwarding and iptables rules, and opening firewall ports (typically 51820 UDP). You'll learn to set persistent keepalive for mobile stability and manage peer configurations for each device connecting to your homelab.
What's the difference between split tunnel and full tunnel routing in WireGuard?
homelab-wireguard-vpn explains that split tunnel routes only home network traffic through your VPN (via restricted AllowedIPs), letting other internet traffic go directly from your phone or laptop. Full tunnel routes all traffic through your home connection. Split tunnel is ideal for accessing homelab services while preserving bandwidth; full tunnel encrypts everything but uses more resources. The skill helps you choose based on your security and performance needs.
How do I generate and manage WireGuard keypairs for peers?
homelab-wireguard-vpn covers keypair generation using wg genkey and wg pubkey commands, plus scripting approaches for batch peer creation. You'll learn to securely store private keys, distribute public keys to clients, and organize peer configurations. The skill includes methods for adding new devices without restarting the server and managing multiple peers for phones, laptops, and other homelab machines.
How can I set up WireGuard clients on my phone and laptop?
homelab-wireguard-vpn walks through configuring WireGuard clients on mobile and desktop platforms. You'll create client config files with your device's keypair, the server's public key and endpoint, and appropriate AllowedIPs for your routing strategy. The skill covers installing the WireGuard app on iOS/Android and Linux/macOS, importing configs, and testing connectivity to your home network services.
What should I do if my WireGuard connection isn't working or routing fails?
homelab-wireguard-vpn provides troubleshooting steps for common WireGuard issues: verify IP forwarding is enabled, check iptables rules and firewall port 51820, confirm AllowedIPs match your routing intent, test with wg show output, and enable persistent keepalive for mobile clients behind NAT. The skill covers diagnosing DNS issues, endpoint resolution with DDNS for dynamic IPs, and validating peer handshakes.
Can I run WireGuard on a Raspberry Pi or pfSense router?
homelab-wireguard-vpn supports deploying WireGuard on Raspberry Pi and pfSense/OPNsense routers as your VPN server. Setup differs slightly: Raspberry Pi uses standard Linux installation, while pfSense has a WireGuard package in its UI. Both approaches let you centralize VPN access to your homelab. The skill covers resource considerations for Pi performance and leveraging router-level VPN for all connected devices.
SKILL.md
rendered from the published skill — quoted content, verbatim
Homelab WireGuard VPN
WireGuard is a fast, modern VPN protocol. It is the right choice for remote access to a home network — simpler to configure than OpenVPN and faster than most alternatives.
All configuration examples show common setups. Review each command — especially the iptables forwarding rules and key file permissions — before applying them to your system, and make changes in a maintenance window.
When to Use
- Setting up WireGuard server on a Raspberry Pi, Linux host, pfSense, or router
- Generating WireGuard keypairs and writing peer config files
- Configuring remote access from a phone or laptop to a home network
- Explaining split tunneling (route only home traffic) vs full tunnel (route all traffic)
- Troubleshooting WireGuard connections that will not come up
- Automating peer configuration generation for multiple clients
How WireGuard Works
``` Your phone (WireGuard client) │ │ Encrypted UDP
(truncated - see the full file via the links below)
Read as markdown · JSON record · Browse the source repository
File tree — 1 file
skills/homelab-wireguard-vpn/SKILL.md