Rusyanto at 17:51, 15 June 2025

2025-06-15T17:51:17Z

← Older revision		Revision as of 00:51, 16 June 2025
Line 54:		Line 54:

	== Secure Connection ==		== Secure Connection ==

			===== Pastikan DNS domain sudah mengarah ke server =====
			Pastikan <code>vpn.deffcon.com</code> sudah mengarah ke IP publik server Anda (<code>103.250.10.5</code>):

			* Login ke penyedia domain Anda.
			* Tambahkan record DNS type <code>A</code>:
			** '''Host:''' <code>track</code>
			** '''Value / IP:''' <code>103.250.10.5</code>

			Tunggu propagasi DNS beberapa menit (hingga 1 jam tergantung provider).

			===== Instal Nginx =====
			sudo apt update
			sudo apt install nginx -y

			===== Konfigurasi Nginx untuk reverse proxy =====
			Buat file konfigurasi baru untuk domain Anda di <code>/etc/nginx/sites-available/vpn.deffcon.com</code>:<syntaxhighlight lang="bash" line="1">
			server {
			listen 80;
			server_name vpn.deffcon.com;

			location / {
			proxy_pass http://localhost:51821/;
			proxy_http_version 1.1;
			proxy_set_header Upgrade $http_upgrade;
			proxy_set_header Connection "upgrade";
			proxy_set_header Host $host;
			proxy_set_header X-Real-IP $remote_addr;
			}
			}
			</syntaxhighlight>'''PORT 51821''' adalah port Wireguard di dalam Docker secara default

			Kemudian aktifkan konfigurasi dengan perintah:
			sudo ln -s /etc/nginx/sites-available/vpn.deffcon.com /etc/nginx/sites-enabled/
			Cek konfigurasi & restart Nginx
			sudo nginx -t
			sudo systemctl restart nginx<br />

			===== Tambahkan HTTPS dengan Let's Encrypt =====
			Agar lebih aman, gunakan SSL via Certbot:
			sudo apt install certbot python3-certbot-nginx -y
			sudo certbot --nginx -d vpn.deffcon.com
			Simpan dan restart Nginx
			sudo systemctl restart nginx

			===== Auto-Renewal SSL =====
			Let's Encrypt sertifikat berlaku 90 hari. Certbot biasanya sudah otomatis membuat cronjob untuk perpanjangan.

			Cek dengan:
			sudo certbot renew --dry-run

			===== Uji Coba SSL =====
			Pergi ke alamat <code>vpn.deffcon.com</code> , apakah sudah terencrypt SSL atau belum.

Rusyanto: Created page with "== Install Wireguard == This is a quick start guide to get you up and running with WireGuard Easy. The easiest way to run WireGuard Easy is with Docker Compose. Create `docker-compose.yml` and execute `sudo docker compose up -d` volumes: etc_wireguard: services: wg-easy: #environment: # Optional: # - PORT=51821 # - HOST=0.0.0.0 # - INSECURE=false image: ghcr.io/wg-easy/wg-easy:15 c..."

2025-06-15T17:35:53Z

Created page with "== Install Wireguard == This is a quick start guide to get you up and running with WireGuard Easy. The easiest way to run WireGuard Easy is with Docker Compose. Create <code>docker-compose.yml</code> and execute <code>sudo docker compose up -d</code><syntaxhighlight lang="bash"> volumes: etc_wireguard: services: wg-easy: #environment: # Optional: # - PORT=51821 # - HOST=0.0.0.0 # - INSECURE=false image: ghcr.io/wg-easy/wg-easy:15 c..."

New page

== Install Wireguard ==
This is a quick start guide to get you up and running with WireGuard Easy.

The easiest way to run WireGuard Easy is with Docker Compose.

Create <code>docker-compose.yml</code> and execute <code>sudo docker compose up -d</code><syntaxhighlight lang="bash">
volumes:
etc_wireguard:

services:
wg-easy:
#environment:
# Optional:
# - PORT=51821
# - HOST=0.0.0.0
# - INSECURE=false

image: ghcr.io/wg-easy/wg-easy:15
container_name: wg-easy
networks:
wg:
ipv4_address: 10.42.42.42
ipv6_address: fdcc:ad94:bacf:61a3::2a
volumes:
- etc_wireguard:/etc/wireguard
- /lib/modules:/lib/modules:ro
ports:
- "51820:51820/udp"
- "51821:51821/tcp"
restart: unless-stopped
cap_add:
- NET_ADMIN
- SYS_MODULE
# - NET_RAW # ⚠️ Uncomment if using Podman
sysctls:
- net.ipv4.ip_forward=1
- net.ipv4.conf.all.src_valid_mark=1
- net.ipv6.conf.all.disable_ipv6=0
- net.ipv6.conf.all.forwarding=1
- net.ipv6.conf.default.forwarding=1

networks:
wg:
driver: bridge
enable_ipv6: true
ipam:
driver: default
config:
- subnet: 10.42.42.0/24
- subnet: fdcc:ad94:bacf:61a3::/64
</syntaxhighlight>Now setup a reverse proxy to be able to access the Web UI securely from the internet.

If you want to access the Web UI over HTTP, change the env var <code>INSECURE</code> to <code>true</code>. This is not recommended. Only use this for testing.

== Secure Connection ==

Wireguard - Docker - Revision history

Rusyanto at 17:51, 15 June 2025