Installing PiVPN with WireGuard on Ubuntu Server

This guide provides step-by-step instructions to install PiVPN using the WireGuard protocol on an Ubuntu Server system. PiVPN simplifies the process of setting up a secure and private VPN server.

System Requirements

Ubuntu Server 20.04 or later
Static IP address
Root or sudo privileges
Port forwarding access on your router

1. Update the System

sudo apt update && sudo apt upgrade -y

2. Set a Static IP Address (if not already set)

Edit your netplan configuration file:

sudo nano /etc/netplan/00-installer-config.yaml

Example configuration:

network:
  version: 2
  ethernets:
    eth0:
      dhcp4: no
      addresses:
        - 192.168.1.100/24
      gateway4: 192.168.1.1
      nameservers:
        addresses: [1.1.1.1, 8.8.8.8]

Apply the changes:

sudo netplan apply

3. Install PiVPN

Run the automated installation script:

curl -L https://install.pivpn.io | bash

During installation:

Select the user for managing VPN (typically your primary user)
Choose WireGuard as the VPN protocol
Allow PiVPN to manage firewall rules
Choose a port (default is 51820/UDP)
Select a DNS provider (Cloudflare, Google, or your own Pi-hole if available)

4. Configure WireGuard Profiles

To add a new VPN client:

pivpn add

Enter a name when prompted. This creates a .conf file stored in:

/home/<user>/configs/

To display a QR code for mobile devices:

pivpn -qr

5. Configure Router Port Forwarding

Log in to your router and forward the selected WireGuard port (e.g., 51820/UDP) to your Ubuntu Server's static IP address.

6. Connect Client Devices

Mobile: Install the WireGuard app and scan the QR code
Desktop: Import the .conf file into the WireGuard app

7. Common PiVPN Commands

Show connected clients:

pivpn -c

List all profiles:

pivpn -l

Revoke a client profile:

pivpn revoke

Update PiVPN:

pivpn update

Conclusion

You now have a secure WireGuard VPN running on Ubuntu Server using PiVPN. Connect remotely, enhance privacy, and safely route your traffic through your home network. Regularly check for updates to keep your VPN secure and performant.