Add check_vpn_connectivity() that runs once after wg0 comes up: - Waits for handshake (up to 15s) and prints public key if missing - Measures RX bytes before/after curl to detect server-side routing issues - Tests DNS resolution and dumps resolv.conf on failure - On failure prints exact server-side commands to fix (sysctl, iptables, wg) Add PersistentKeepalive=25 to wg0.conf to keep NAT mappings alive.
18 lines
603 B
Plaintext
18 lines
603 B
Plaintext
[Interface]
|
|
PrivateKey = EPRa2f/v72LvIXAY4yqIRJifsSb+nCcYHqC2rwA94UI=
|
|
Address = 100.64.244.78/32
|
|
DNS = 198.18.0.1,198.18.0.2
|
|
|
|
# Route zum VPN-Server direkt über dein lokales Netz
|
|
PostUp = ip route add 91.148.236.64 via 192.168.178.1 dev wlp4s0f0
|
|
PostUp = ip route add 192.168.178.0/24 via 192.168.178.1 dev wlp4s0f0
|
|
PostDown = ip route del 91.148.236.64 via 192.168.178.1 dev wlp4s0f0
|
|
PostDown = ip route del 192.168.178.0/24 via 192.168.178.1 dev wlp4s0f0
|
|
|
|
[Peer]
|
|
PublicKey = KgTUh3KLijVluDvNpzDCJJfrJ7EyLzYLmdHCksG4sRg=
|
|
AllowedIPs = 0.0.0.0/0
|
|
Endpoint = 91.148.236.64:51820
|
|
PersistentKeepalive = 25
|
|
|