diff --git a/wireguard-install.sh b/wireguard-install.sh index 07ef9a1..b0bd456 100644 --- a/wireguard-install.sh +++ b/wireguard-install.sh @@ -67,6 +67,10 @@ read -rp "First DNS resolver to use for the client: " -e -i "$CLIENT_DNS_1" CLIE CLIENT_DNS_2="176.103.130.131" read -rp "Second DNS resolver to use for the client: " -e -i "$CLIENT_DNS_2" CLIENT_DNS_2 +# Ask for pre-shared symmetric key +IS_PRE_SYMM="y" +read -rp "Want to use pre-shared symmetric key? [Y/n]: " -e -i "$IS_PRE_SYMM" IS_PRE_SYMM + if [[ $SERVER_PUB_IP =~ .*:.* ]] then echo "IPv6 Detected" @@ -133,6 +137,15 @@ PublicKey = $SERVER_PUB_KEY Endpoint = $ENDPOINT AllowedIPs = 0.0.0.0/0,::/0" >> "$HOME/$SERVER_WG_NIC-client.conf" +# Add pre shared symmetric key to respective files +case "$IS_PRE_SYMM" in + [yY][eE][sS]|[yY]) + CLIENT_SYMM_PRE_KEY=$( wg genpsk ) + echo "PresharedKey = $CLIENT_SYMM_PRE_KEY" >> "/etc/wireguard/$SERVER_WG_NIC.conf" + echo "PresharedKey = $CLIENT_SYMM_PRE_KEY" >> "$HOME/$SERVER_WG_NIC-client.conf" + ;; +esac + chmod 600 -R /etc/wireguard/ # Enable routing on the server