WireGuard VPN setup

This template contains a dummy keypair. It is not secret and must not be used as-is — every device needs its own private key. Follow the steps below to swap it out before you rely on this tunnel.

0. Install the WireGuard app

Official install instructions and app links for every platform (iPhone/iPad, Android, macOS, Windows, Linux) are here: wireguard.com/install.

1. Import the template

Either scan this QR code in the WireGuard app (Scan from QR code), or download the config file below:

WireGuard config QR code Download wireguard-template.conf

2. Regenerate your private key

In the WireGuard app, open the imported tunnel's edit screen and tap the key icon to generate a new keypair on-device (or run wg genkey yourself and replace the PrivateKey line). This replaces the dummy key with one only your device knows.

3. Send us your public key

After regenerating, the app shows the new public key. Send that public key to Alex so it can be added as an authorized peer — you'll also be given a tunnel Address to replace the placeholder 10.0.0.99/32 with. The tunnel won't pass traffic until this is done.

Manual configuration reference

If you'd rather type the config in by hand instead of importing it:

[Interface]
PrivateKey = <generate your own, see step 2>
Address = <assigned by Alex, see step 3>
DNS = 192.168.88.51, 192.168.88.52, 192.168.88.53

[Peer]
PublicKey = LlsRzLkce+rLkX/hZpS1dfJR1AIUyG/ML9WVoLRZ0DY=
Endpoint = vpn.zfc.io:51820
AllowedIPs = 0.0.0.0/0, ::/0
PersistentKeepalive = 25