Simplest Wireguard Setup Ever

March 26, 2021 by Charlie Leave a Comment

Wireguard

Wireguard is the newest way to setup a VPN for your home servers. What will this do for you ? It allows you to access your Raspberry Pi or other local servers located at home behind your router (or even your router itself) from outside your network by simply using a Wireguard client (either on a mobile phone or using a computer). You then access your local servers with the same ip addresses you do at home. For example, if my router is 192.168.1.1., I can be half way around the world and type in “192.168.1.1” and get my router control panel.

A recent podcast of Linux Unplugged “Back to the Freedom Dimension” had some really useful information on Wireguard and some interesting use cases. Paraphrasing one of the hosts, Wireguard is like having a very long ethernet cable into your home router.

The simplest method I have found to install Wireguard on Raspberry Pi is to use Docker following this post from The Digital Life.

Here is the somewhat modified docker compose file I use:

Wireguard Docker Compose file



version: "2.1"
services:
  wireguard:
    image: linuxserver/wireguard
    container_name: wireguard
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    environment:
      - PUID=1001
      - PGID=1001
      - TZ=[*Insert Your TZ Database name from  https://en.wikipedia.org/wiki/List_of_tz_database_time_zones*]
      - SERVERURL=[Insert Your Dynamic DNS domain name pointing to local server, e.g., www.mylocalserver.com] #optional
      - SERVERPORT=42842#optional
      - PEERS=1 #optional
      - PEERDNS=auto #optional
    volumes:
      - ./config:/config
      - /lib/modules:/lib/modules
    ports:
      - 42842:51820/udp
    sysctls:
      - net.ipv4.conf.all.src_valid_mark=1
    restart: unless-stopped

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

version: "2.1"

services:

wireguard:

image: linuxserver/wireguard

container_name: wireguard

cap_add:

- NET_ADMIN

- SYS_MODULE

environment:

- PUID=1001

- PGID=1001

- TZ=[*Insert Your TZ Database name from https://en.wikipedia.org/wiki/List_of_tz_database_time_zones*]

- SERVERURL=[Insert Your Dynamic DNS domain name pointing to local server, e.g., www.mylocalserver.com] #optional

- SERVERPORT=42842#optional

- PEERS=1 #optional

- PEERDNS=auto #optional

volumes:

- ./config:/config

- /lib/modules:/lib/modules

ports:

- 42842:51820/udp

sysctls:

- net.ipv4.conf.all.src_valid_mark=1

restart: unless-stopped

Now it’s just a matter of typing “docker-compose up -d” and you have a running wireguard instance. Set up the clients as described in The Digital Life post.

Using WP-CLI to Access MySQL Running in A LAMP Docker Container

October 21, 2020 by Charlie Leave a Comment

WP-CLI is a great command line tool to help you manage WordPress.

I had trouble figuring out how to use WP-CLI to access a MySQL database that was running in a Docker container. I’m running a Docker LAMP instance locally using this set of Docker and Docker-Compose files from sprintcube.

The MySQL instance holding my local WordPress database is running in a Docker container. However, my WordPress core files are located located in a directory on the host’s physical hard drive defined as a Docker volume.

The trick is defining your DB_HOST environment value to be the IP address of your MySQL Docker container. You can do this either explicitly by the command line or in your WP configuration files (for a typical install in your wp-config.php file, in a bedrock install in your .env files).

Getting the IP Address of the MySQL Docker Container

You can find the IP address of your docker container by executing the following command:



docker inspect -f '{{range.NetworkSettings.Networks}}{{.IPAddress}}{{end}}' CONTAINER-NAME

1

2

3

4

5

docker inspect -f '{{range.NetworkSettings.Networks}}{{.IPAddress}}{{end}}' CONTAINER-NAME

Get your container name:



docker container ls

1

2

3

4

5

docker container ls

From this, I see that the Mysql container name is “lamp-database”.

d

Define DB_HOST Environmental Variable

Execute the following command substituting CONTAINER-NAME with your database container:



export DB_HOST=$(docker inspect -f '{{range.NetworkSettings.Networks}}{{.IPAddress}}{{end}}' CONTAINER-NAME

1

2

3

4

5

export DB_HOST=$(docker inspect -f '{{range.NetworkSettings.Networks}}{{.IPAddress}}{{end}}' CONTAINER-NAME

Define the Path to Your WordPress Install in Your WP-CLI Configuration Files

Create wp-cli.yml file in the directory you will be using WP or, alternatively create ~/.wp-cli/config.yml

The local alias should point to the WordPress file on your Docker volume as shown in this example:



@prod:
  ssh: username@myproductionserver.com:22/home/username/bedrock/www

@local:
  path: /home/local-username/website/bedrock/web/wp  [<-- note this is path to WordPress core files ]

1

2

3

4

5

6

7

8

9

@prod:

ssh: username@myproductionserver.com:22/home/username/bedrock/www

@local:

path: /home/local-username/website/bedrock/web/wp [<-- note this is path to WordPress core files ]

To backup your WordPress database just type:



wp @local db export

1

2

3

4

5

wp @local db export

Note that this method is intended to be used for a LAMP Docker install with the WordPress files being simply installed in the document root kept in a defined volume on the host’s physical drive and WP-CLI installed on the physical docker host.

If you are using a WordPress container to run WordPress and/or WP-CLI, then you most likely want to use the ssh tag in wp-cli.yml. See the WP-CLI documentation regarding the ssh tag and brief discussion of the Docker scheme.

Dunzip – Download and Unzip in Linux With One Command

October 7, 2020 by Charlie Leave a Comment

Tired of downloading zip or tar files, decompressing, and then having to delete the compressed file ?

Do it all in one step with this Tip

Copy and paste this function into your .bashrc (or in my case as I used .zsh, .zshrc):

dunzip() {wget -qO- $1 | bsdtar -xvf-;}

1
2
3

dunzip() {wget -qO- $1 | bsdtar -xvf-;}
Then type the following in your terminal:

source ~/.bashrc

1
2
3

source ~/.bashrc

If you are using zsh, substitute “.zshrc” for .bashrc.

Works for zip and gzipped tar files.

Example

For details on this command see this stack exchange answer to How to redirect output of wget as input to unzip? by ruario.

Regarding functions and how to use them see with arguments see Make a Bash alias that takes a parameter?.

geekvisit.com

Hacks, Tutorials, Tips and Tricks for Windows and Linux Enthusiasts

Linux