From 9d3fe38e3700e845524e3ff0682f9af1509b84f1 Mon Sep 17 00:00:00 2001
From: root <root@onfarbo43.sio.lan>
Date: Wed, 9 Feb 2022 11:20:26 +0100
Subject: [PATCH] fichier de conf + script installation

---
 wireguard/wg0.conf | 18 +++++++++++
 wireguard/wgap4.sh | 79 ++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 97 insertions(+)
 create mode 100644 wireguard/wg0.conf
 create mode 100644 wireguard/wgap4.sh

diff --git a/wireguard/wg0.conf b/wireguard/wg0.conf
new file mode 100644
index 0000000..055d3a2
--- /dev/null
+++ b/wireguard/wg0.conf
@@ -0,0 +1,18 @@
+# local settings for Endpoint A
+[Interface]
+PrivateKey = kJfPU7pqldy6d7K+8Gbby7Hbw1zh7amdIIccmC9NY1s=
+Address = 10.0.0.1/32
+ListenPort = 51820
+ 
+# remote settings for Endpoint B
+[Peer]
+PublicKey = pMaLJGkdgcT3jwPC7F/EUlr9U8VbkZli9Ru65zkXH2U=
+#Endpoint = 192.168.1.82:51820
+AllowedIPs = 10.0.0.2/32
+ 
+# remote settings for Endpoint C
+[Peer]
+PublicKey = HuwPkFzi25gAovg+Ni7lpCK6TvcK1HBdbgg3lVRK+zY=
+#Endpoint = x.y.z.t:51820
+AllowedIPs = 10.0.0.3/32
+ 
diff --git a/wireguard/wgap4.sh b/wireguard/wgap4.sh
new file mode 100644
index 0000000..7020125
--- /dev/null
+++ b/wireguard/wgap4.sh
@@ -0,0 +1,79 @@
+#!/bin/bash
+set -u
+set -e
+ 
+AddressAwg=10.0.0.1/32  # Adresse VPN Wireguard extremite A
+EndpointA=10.121.38.70  # Adresse extremite A
+PortA=51820             # Port ecoute extremite A
+AddressBwg=10.0.0.2/32  # Adresse VPN Wireguard extremite B
+EndpointB=192.168.1.82  # Adresse extremite B
+PortB=51820             # Port ecoute extremite B
+AddressCwg=10.0.0.3/32
+EndpointC=x.y.z.t
+PortC=51820
+
+umask 077 ;  
+wg genkey > endpoint-a.key
+wg pubkey < endpoint-a.key > endpoint-a.pub
+ 
+wg genkey > endpoint-b.key
+wg pubkey < endpoint-b.key > endpoint-b.pub
+ 
+wg genkey > endpoint-c.key
+wg pubkey < endpoint-c.key > endpoint-c.pub
+PKA=$(cat endpoint-a.key)
+pKA=$(cat endpoint-a.pub)
+PKB=$(cat endpoint-b.key)
+pKB=$(cat endpoint-b.pub)
+PKC=$(cat endpoint-c.key)
+pKC=$(cat endpoint-c.pub)
+
+
+cat <<FINI > wg0-a.conf
+# local settings for Endpoint A
+[Interface]
+PrivateKey = $PKA
+Address = $AddressAwg
+ListenPort = $PortA
+ 
+# remote settings for Endpoint B
+[Peer]
+PublicKey = $pKB
+#Endpoint = ${EndpointB}:$PortB
+AllowedIPs = $AddressBwg
+ 
+# remote settings for Endpoint C
+[Peer]
+PublicKey = $pKC
+#Endpoint = ${EndpointC}:$PortC
+AllowedIPs = $AddressCwg
+ 
+FINI
+cat <<FINI > wg0-b.conf
+# local settings for Endpoint B
+[Interface]
+PrivateKey = $PKB
+Address = $AddressBwg
+ListenPort = $PortB
+ 
+# remote settings for Endpoint A
+[Peer]
+PublicKey = $pKA
+Endpoint = ${EndpointA}:$PortA
+AllowedIPs = $AddressAwg
+
+FINI
+cat <<FINI > wg0-c.conf
+# local settings for Endpoint C
+[Interface]
+PrivateKey = $PKC
+Address = $AddressCwg
+ListenPort = $PortC
+ 
+# remote settings for Endpoint A
+[Peer]
+PublicKey = $pKA
+Endpoint = ${EndpointA}:$PortA
+AllowedIPs = $AddressAwg
+
+FINI