Wireguard for Fika

This document will walk you through creating a Wireguard VPN using a publicly-accessible VPS host. This is useful if you want to run Fika in a group without requiring any port-forwarding.

Prerequisites

• A Debian-based (Debian/Ubuntu) system with a public IPv4 address
• Root access

Steps

1. Make sure you're logged in as the root user. If you're logged in as a standard user, use sudo su - and enter your password.
2. Download Tom's Easy Wireguard Setup Script: curl https://raw.githubusercontent.com/samurailink3/TomsEasyWireguardSetupScript/main/install-wireguard.bash > install-wireguard.bash
3. Make the script executable: chmod +x install-wireguard.bash
4. Run the script: ./install-wireguard.bash
5. This script will create a series of client_x.conf files in /etc/wireguard/
6. Send one file to each of your players, if you need more config files, run the script again and increase the number of clients
7. Your players will need to:
   1. Install the Wireguard client: https://download.wireguard.com/windows-client/wireguard-installer.exe
   2. Add the config file you give them to their wireguard client
   3. Click the Activate button in wireguard
8. TODO SCREENSHOTS

Recommended Next Steps

If you don't have Fika Server hosted in a Docker container, that's a great next step. This will keep your server and VPN on a single host and allow your users to access the shared Fika server through the address 10.11.12.1. I recommend using OnniSaarni's SPT-Fika-Docker-Guide to get this set up.

References and Sources

• The complete guide to setting up a multi-peer WireGuard VPN - Door jeroen
  • Most of this guide wouldn't be possible without the steps listed in this article...
• dddma's firewall post on Reddit
  • specifically this post by dddma, without this step, traffic cannot be properly forwarded between clients.