Set up on Linux

On Linux you connect with wg-quick, part of wireguard-tools. You'll need a tunnel in your Ghostunnel account — create one first.

1. Install wireguard-tools

Install it from your distribution's packages. For example:

# Debian / Ubuntu
sudo apt install wireguard-tools

# Fedora
sudo dnf install wireguard-tools

Other distributions are listed on the WireGuard install page.

2. Download your configuration

Create a tunnel and select Download .conf on the page that follows. The file is named after the tunnel (or its location), for example netherlands.conf.

The configuration is shown once, right after you create the tunnel — we don't keep its private key. Already left that page? Open the tunnel from Tunnels and select Get a new configuration.

3. Connect

sudo wg-quick up ./netherlands.conf

Check the connection with sudo wg show. To disconnect:

sudo wg-quick down ./netherlands.conf

Keep it around

To use the short form (sudo wg-quick up netherlands), move the file to /etc/wireguard/ and make it readable by root only:

sudo install -m 600 netherlands.conf /etc/wireguard/

The configuration sets a DNS server, so wg-quick needs resolvconf (or systemd-resolved) to apply it. If wg-quick up complains about resolvconf, install your distribution's resolvconf or openresolv package.

The file contains your tunnel's private key — don't share it. See Your keys.