WireGuard安装教程

### 1.从官网下载WireGuard程序及依赖
```
sudo yum install epel-release
```
```
sudo yum config-manager --set-enabled PowerTools
```
```
sudo yum copr enable jdoss/wireguard
```
```
sudo yum install wireguard-dkms wireguard-tools
```
### 2.进入配置存储路径，调整目录权限
```go
cd /etc/wireguard/
```
```go
chmod 0777 /etc/wireguard
```
> 调整目录默认权限
```go
umask 077
```
### 3.生成服务器秘钥
> 生成私钥
```go
wg genkey > server.key
```
> 通过私钥生成公钥
```go
wg pubkey < server.key > server.pub.key
```
### 4.修改配置文件
```coffeescript
[Interface]
  PrivateKey = 4ExiyEc0vfE2xO8dSf7voWBhliD04Vy/FYVulfQVklk=  # 填写本机的privatekey 内容
  Address = 10.0.8.10/32
  DNS = 114.114.114.114
  MTU = 1420

[Peer]
  PublicKey = YanajZJaOXIVdGqzmlCSGPvvnaQza9KWpdI5Gwdebm0=  # 填写客户端的publickey 内容
  Endpoint = xxx.xxx.xxx.xxx:8080
  AllowedIPs = 0.0.0.0/0
  PersistentKeepalive = 25		#间隔重连时间
```
> 置服务器开机自启动
```go
nano /etc/wireguard/wg0.conf
```
> 启动wg0
```c
wg-quick up wg0
```
> 关闭wg0
```c
wg-quick down wg0
```
### 5.客户端配置（以client1为例）
```go
[Interface]
PrivateKey = 6M8HEZioew+vR3i53sPc64Vg40YsuMzh4vI1Lkc88Xo= #此处为客户端的私钥
Address = 10.0.8.10 #此处为peer规定的客户端IP
MTU = 1500

[Peer]
PublicKey = Tt5WEa0Vycf4F+TTjR2TAHDfa2onhh+tY8YOIT3cKjI= #此处为服务器的公钥
AllowedIPs = 10.0.8.0/24 #此处为允许的服务器IP
Endpoint = xxx.xxx.xxx.xxx:8080 #服务器对端IP+端口
```
### 6.增加服务器客户端节点client2
#### a.生成私钥
```delphi
cd /etc/wireguard/
```
```go
wg genkey > client2.key
```
#### b.通过私钥生成公钥
```go
wg pubkey < client2.key > client2.pub.key
```

#### c.将peer公钥加入wg0.conf配置
```go
echo "
[Peer]
PublicKey =  $(cat client2.pub.key)
AllowedIPs = 10.0.8.11/32 " >> wg0.conf
```
#### d.生成客户端配置文件
```go
echo "
[Interface]
PrivateKey = $(cat client2.key)
Address = 10.0.8.12 #此处为peer规定的客户端IP
MTU = 1500
[Peer]
PublicKey = $(cat server.pub.key)
AllowedIPs = 0.0.0.0/0
Endpoint = 47.119.177.109:8080 " >> client2.conf
```
#### e.压缩为zip文件，方便手机导入
```cpp
 zip client2.zip client2.conf
```