This article is a year old. Certainly Wireguard setup / config has improved this past year, yes?
It's already absolutely fantastic compared to any other solution I can think of (_especially_ OpenVPN, which requires generating a bunch of x.509 certs).
This article has a ton of steps which aren't even WireGuard specific like server firewall rules.
The actual configuration of WG is basically 'generate a private and public key on server and client, stick it in a config file, run wg-quick up, done'.
I think I wasn't doing something right, though, since I was getting very weird errors that I wasn't able to google. Also I think my issue was like more with the macOS client rather than the server.
I think Wireguard is still at the same level that git was about 10 years ago: powerful, elegant, but absolutely not user-friendly. But nobody is claiming that it is (same with git).
I suspect in the next couple of years, you'll see an explosion of really nice tools to make this setup even easier than it is now.
Until then, I'll keep fiddling and try to get wireguard running on my macOS client/ubuntu server setup.
[Interface]
PrivateKey = redacted
Address = 10.100.0.3/24
[Peer]
PublicKey = redacted
AllowedIPs = 10.100.0.0/24
Endpoint = 18.xxx.xxx.xxx:51820
PersistentKeepalive = 25
sudo wg-quick up foo
INFO: (utun2) 2018/12/16 18:43:24 Starting wireguard-go version 0.0.20181018
[+] Interface for foo is utun2
[#] wg setconf utun2 /dev/fd/63
[#] ifconfig utun2 inet 10.100.0.3/24 10.100.0.3 alias
[#] ifconfig utun2 up
[#] route -q -n add -inet 10.100.0.0/24 -interface utun2
[+] Backgrounding route monitor
Yeah, the non-Linux clients are all a faff.
It's pretty user friendly on Linux. Everywhere else it's alpha level. IMO.
> It's already absolutely fantastic compared to any other solution...
I don’t think that this means there’s no room for improvement.
As someone else stated, the config process is pretty standard procedure so I guess there's not a lot of "improvements" one can do on that side :)
WireGuard could certainly present those options as a default and automatically do them, but that would be above and beyond what a tool usually does.