Best practices for adding hosts

Best practices for adding hosts

[Ronan Lucio]

Hi,

I have a wireguard VPN server, and it's working gracefully, thanks for that.
I'd like to ask you how can I add more peers without having to restart wg.

So far I use to add new peers to the "wg0.conf" file and execute a
"systemctl restart wg-quick@wg0".
The problem is all peers go down when I do it, and there's no
"systemctl reload" option.

If possible, I'd like to keep all configs on config files, so it's
possible to automate configuration via ansible.

Thanks,
Ronan

Re: Best practices for adding hosts

[Reto]

On Mon, Dec 21, 2020 at 12:09:40PM +1300, Ronan Lucio wrote:
> I have a wireguard VPN server, and it's working gracefully, thanks for that.
> I'd like to ask you how can I add more peers without having to restart wg.

`man wg`... set / setconf / addconf depending on your specific usecase.

Also, `man wg-quick`

```
The strip command is useful for reloading configuration files without disrupting active sessions:
# wg syncconf wgnet0 <(wg-quick strip wgnet0)
```

As well as: https://git.zx2c4.com/wireguard-tools/commit/?id=a66219fa107e1bf0a03ebbbc405879c1f0a826c5


Cheers,
Reto

Re: Best practices for adding hosts

[Ronan Lucio]

Hi Domi,

Right, it's not on the latest version. Actually, I used to run the
system version, so I can set it to automate unattended-updated.
Anyway, no problem updating it... ;-)

I tried executing it manually and got this:

    $ sudo wg syncconf wg0 <(exec /usr/bin/wg-quick strip wg0)>
    -bash: syntax error near unexpected token `newline'

Any clue?

Thank you,
Ronan

On Mon, Dec 21, 2020 at 1:01 PM Tomcsanyi, Domonkos <domi@tomcsanyi.net> wrote:
>
> Hi Ronan,
>
> There should be a reload option, check the changelog from August this year:
>
> https://lists.zx2c4.com/pipermail/wireguard/2020-August/005780.html
>
> Maybe you are not running the latest version? In that case just take the command from the patch and run it manually.
>
> Kind regards,
> Domi
>
>
> 21.12.2020 dátummal, 0:11 időpontban Ronan Lucio <ronanlucio@gmail.com> írta:
>
> Hi,
>
> I have a wireguard VPN server, and it's working gracefully, thanks for that.
> I'd like to ask you how can I add more peers without having to restart wg.
>
> So far I use to add new peers to the "wg0.conf" file and execute a
> "systemctl restart wg-quick@wg0".
> The problem is all peers go down when I do it, and there's no
> "systemctl reload" option.
>
> If possible, I'd like to keep all configs on config files, so it's
> possible to automate configuration via ansible.
>
> Thanks,
> Ronan

Re: Best practices for adding hosts

[Ronan Lucio]

Hi Andrew,

> /usr/bin/wg syncconf wg0 <(wg-quick strip wg0)

worked smoothly
Thank you so much

Ronan

On Mon, Dec 21, 2020 at 2:10 PM Andrew Fried <afried@spamteq.com> wrote:
>
> Try running the command under bash, eg:
>
> #!/bin/bash
> /usr/bin/wg syncconf wg0 <(wg-quick strip wg0)
>
> Andrew
>
> On 12/20/20 7:51 PM, Ronan Lucio wrote:
>
> Hi Domi,
>
> Right, it's not on the latest version. Actually, I used to run the
> system version, so I can set it to automate unattended-updated.
> Anyway, no problem updating it... ;-)
>
> I tried executing it manually and got this:
>
>     $ sudo wg syncconf wg0 <(exec /usr/bin/wg-quick strip wg0)>
>     -bash: syntax error near unexpected token `newline'
>
> Any clue?
>
> Thank you,
> Ronan
>
> On Mon, Dec 21, 2020 at 1:01 PM Tomcsanyi, Domonkos <domi@tomcsanyi.net> wrote:
>
> Hi Ronan,
>
> There should be a reload option, check the changelog from August this year:
>
> https://lists.zx2c4.com/pipermail/wireguard/2020-August/005780.html
>
> Maybe you are not running the latest version? In that case just take the command from the patch and run it manually.
>
> Kind regards,
> Domi
>
>
> 21.12.2020 dátummal, 0:11 időpontban Ronan Lucio <ronanlucio@gmail.com> írta:
>
> Hi,
>
> I have a wireguard VPN server, and it's working gracefully, thanks for that.
> I'd like to ask you how can I add more peers without having to restart wg.
>
> So far I use to add new peers to the "wg0.conf" file and execute a
> "systemctl restart wg-quick@wg0".
> The problem is all peers go down when I do it, and there's no
> "systemctl reload" option.
>
> If possible, I'd like to keep all configs on config files, so it's
> possible to automate configuration via ansible.
>
> Thanks,
> Ronan

Re: Best practices for adding hosts

[Adrian Ho]

On 21/12/20 8:51 am, Ronan Lucio wrote:
> I tried executing it manually and got this:
>
>      $ sudo wg syncconf wg0 <(exec /usr/bin/wg-quick strip wg0)>
>      -bash: syntax error near unexpected token `newline'

Your command:

sudo wg syncconf wg0 <(exec /usr/bin/wg-quick strip wg0)>

has an output redirection character ('>') at the end, so bash was 
expecting a filename after that, but got a newline instead.

Best Regards,
Adrian