"A regular, original, know-it-all."
"A regular, original, know-it-all."
AutoTun is a one-command WireGuard tunnel generator written in Python. It creates a public/private keypair and a pre-shared key, creates an interface configuration file, and registers the new interface with the central wireguard node. Future plans are to make it more robust, to create a QR code display, and re-do the whole thing in PowerShell for the PS practice.
In the course of my employment at Webformix Wireless Internet, I had to design, test, and deploy a secure system for remote work.
The system that ultimately resulted leverages MikroTik's RouterOS and Wireguard to basically extend the company's intranet to the employee's remote work site.
To begin with, a Wireguard interface is created on a RouterOS device inside the company network, assigned a public-facing IP address, and brought online. Next, a private /29 IPv4 Block is assigned to the remote site. Routing is assigned such that the intranet directs traffic to that block to the WireGuard interface.
Using a small MikroTik or RouterOS device such as a hEX lite, a mini-LAN is set up. A DHCP server on the hEX lite assigns the /29 addresses to local equipment. Static routes send company-destined traffic through the WireGuard interface, while regular internet traffic directs out the default gateway. An employee simply plugs in a network device and that device appears on the company intranet, just as though they were at the office.
If necessary, the remote worker's RouterOS device can be securely managed through the WireGuard interface without exposing management interfaces to the internet. It's also NAT-penetrable.
My LAMP (Or really, LLMP, as I prefer lighttpd to Apache) server recently blew up while I was working on the ProxMox cluster. I need to rebuild it, I just haven't gotten to it yet. We definitely need our journals/private WordPresses back.
A way to automatically publish and revoke public keys and certificates across the network and all those devices that use them. It will probably need to be push-based due to the sheer variety of things that need an SSL certificate.
Most of my projects really should be subject to git tracking. So I need to finish reading Pro Git and set up a network storage location for a Git repo.