Ƙirƙiri maɓallan WireGuard a cikin gida: umarni da kulawa

Umarni biyu suna ƙirƙirar maɓallan WireGuard biyu kuma duka suna zuwa da kayan aikin da aka saba, don haka wannan aikin ba ya buƙatar gidan yanar gizo da ke ba da damar yin maɓalli a madadinka. Abin da ke lalacewa ba shine lissafin lanƙwasa ba; su ne bit ɗin izini, wurin da fayil ɗin ya sauka, da abin da aka aika zuwa ƙarshen ɗayan bayan haka. Jerin da ke ƙasa yana farawa a cikin babban fayil mara komai kuma yana ƙarewa wurin abokin tarayya da ke ɗaukar zirga-zirga. Karanta shi sau ɗaya kafin ka gudanar da shi, domin layin farko yana da mahimmanci ne kawai idan na gaba ya gudana a cikin wannan harsashi.

Ƙirƙirar ma'auratan a cikin harsashi ɗaya

Tsarin aikin da aka rubuta yana taƙaita ƙirƙirar fayil kafin ƙimar sirri ta kasance, sannan ya samo ƙimar jama'a daga gare ta. Dukan layukan uku suna tare a cikin zaman harsashi ɗaya:

umask 077  # applies to files created next, so keep the next line in this shell
wg genkey | tee privatekey | wg pubkey > publickey
wg pubkey < privatekey  # re-derive and compare with publickey

wg genkey yana rubuta maɓallin sirri na Curve25519 na byte 32 a cikin base64; wg pubkey yana karanta shi kuma ya sami maɓallin jama'a da ya dace, kuma tee yana adana ƙimar sirri yayin da yake wuce ta cikin bututu. Wannan tsari ne dalilin da yasa layin izini ke zuwa farko, da kuma dalilin da yasa liƙa bututun a wani tasha na biyu yake rasa shi a hankali. Sunayen fayil ɗin misali ne, kuma abin da ke da mahimmanci shi ne duka fayil ɗin biyu su sauka wani wuri da na'urar mai shi ke sarrafawa. Idan fayil ɗin sirri ya riga ya kasance da izini na asali, chmod 600 privatekey yana gyara fayil ɗin na yanzu kuma ba ya yin komai game da kwafin da aka yi a baya.

Ajiye rabin sirri a na'ura ɗaya

Ƙimar sirri ta na'urar da za ta mallaki asalin ne, a cikin babban fayil da wannan na'urar ke kariya kuma kwafinta na ajiya ke ɗaukarsa a matsayin takardar shaidar shiga. Ba ta cikin babban fayil da aka raba, cikin saƙo zuwa gare ka, ko cikin guntun da aka haɗa da tikitin tallafi, kuma kwafin da aka saka yana sa fayil ɗin tsarin ya zama mai mahimmanci kamar maɓallin. Maɓallin da ya rayu a wurare uku ba za a iya yin tunani a kansa daga baya ba, kuma wannan shine dalilin aiki na ajiye shi a wuri ɗaya.

Lalata fayil ɗin da aka yi ritaya da gangan wani ɓangare ne na wannan al'ada. Barin shi a cikin babban fayil ɗin saukarwa har wani ya lura ba haka bane.

Abin da mai gudanar da abokin tarayya ke buƙata daga gare ka

Ɗayan gefen yana buƙatar ƙimar jama'a da tsarin adireshin da mai gudanarwarsa ya zaɓa, ba wani abu ba. Aika wannan igiyar jama'a ta duk tashar da mai gudanarwar ke tsammani, sannan tabbatar da wace shigarwar abokin tarayya aka haɗa ta da ita kafin wani ya gwada ta, domin maɓalli daidai a cikin sashe mara kyau yana kasawa ta hanyar da take kama da matsalar maɓalli. Aika shi a matsayin layi ɗaya mara naɗewa, domin maɓallin da ya karye a kan layi biyu ana liƙa shi cikin fayil ɗin tsari ba tare da ƙorafi ba sannan kuma ba ya taɓa daidaitawa.

Ƙirƙirar maɓalli ba ta ba da izini ga komai da kanta. Dole ne a saita abokin tarayya don karɓa, kuma matakin saitin na wanda ke tafiyar da wannan ƙarshen ne.

Gwada ma'auratan da musayar gaske

Maɓallan biyu suna gane ƙarshen rami ɗaya; ba ya ƙirƙirar hanya, shigarwar mai warwarewa, ƙa'idar turawa ko izinin bangon wuta. Bayan an tanadi abokin tarayya, gwada musayar maimakon fayil ɗin: musafaha da ke bayyana a cikin wg show, adireshin da ke amsawa cikin ramin, da buƙatar aikace-aikace ɗaya da ta dogara da hanyar. Wannan ukun suna raba maɓallin da ba daidai ba daga maɓalli mai kyau da hanyar da ta ɓace.

Ajiye asali ɗaya ga kowace na'ura lokacin da turawar ta yarda, domin a iya soke naúrar da ta ɓace ita kaɗai maimakon tilasta kowa ya sake ƙirƙirar maɓalli. Wannan shawarar ita ce kuma ke sa hanyar maye gurbin da ke ƙasa lafiya don gudanarwa.

Maye gurbin maɓalli ba tare da rata ba

Ƙirƙiri maye gurbin a na'urar, ƙara sabon maɓallin jama'a a matsayin ƙarin abokin tarayya, tabbatar yana ɗaukar zirga-zirga, sannan ka cire tsohon. Yin haka a cikin wannan tsari yana nufin ramin ba ya taɓa samun lokacin da ba shi da ingantaccen asali, kuma komawa baya shine kawai share shigarwar da ka ƙara yanzu.

Ajiye fayil ɗin sirri da aka maye gurbinsa har sai an tabbatar da sabon abokin tarayya, sannan ka lalata shi da gangan. Farawar sauri ta WireGuard ita ce jagora ga umarnin kansu, kuma ya yi gajarta da za ka karanta shi gaba ɗaya kafin ka fara.