There are many different VPN protocols, WireGuard is one of the more commonly used protocols. Since it already has a wide-spread adoption and a wide tool set, we decided to implement it into remote-backups.com so you can connect to our infrastructure easily.
Installation
On your client, install the wireguard package. Since you are most likely to be on a Debian based System (PBS/PVE), we will use this. But commands should be similar on all operating systems.
$ apt install wireguard -yConfiguration
In the dashboard, you are required input a public key. This can be generated with the following command:
$ wg genkey | tee client-privatekey | wg pubkey > client-publickey
$ cat client-publickeyNever share the private key file with anyone!
You will also need to select an IP-Range for your client. You can select freely from the list - it’s important that the range does not overlap with your LAN or any other VPNs you might have on that machine.
After the connection is created, you will get a configuration file where you need to replace the private key with the one from the file. Usually this is put into the /etc/wireguard/wg0.conf file.
After that, use wg-quick up wg0 to bring up the connection and make sure it’s working with wg show.
PBS/PVE Configuration
When not using pull jobs, you need to adjust the settings in your backup job or remotes (depending on wether you are using PBS or PVE).
We run a DNS Server on the gateway IP of your subnet (e.g. 192.200.0.1 if you choose the 192.200.0.0/16 range) which will return the correct IP-Adresses for our used domains. Should this fail for some reason, please add a new entry to /etc/hosts which resolved the fra1-ingress.pbs-host.de domain to the Gateway IP (in my case 192.200.0.1).
This is also the target domain of all your backup jobs or remotes. Change it everywhere - if your datastore is located in region ham1 it will still work.
Removing tailscale
After the migration is done you can remove tailscale from your system via the following list of commands:
$ tailscale down
$ apt remove --purge tailscale
$ rm /etc/apt/sources.list.d/tailscale*