Wireguard

Rocky Linux

Dual NIC wireguard setup

Prerequisite Network Config

• Configure the firewall to only allow the wireguard port, then move the internal interface to the internal zone.

firewall-cmd --permanent --add-port=51820/udp --zone=public
firewall-cmd --permanent --remove-service=dhcpv6-client --zone=public
firewall-cmd --permanent --remove-service=cockpit --zone=public
firewall-cmd --permanent --remove-service=ssh --zone=public
firewall-cmd --permanent --zone=internal --change-interface=enp3s0