{ "created": "2024-01-23T02:27:10Z", "hierarchy": [ { "name": "ROOT", "type": "folder", "uri": "/ROOT" }, { "name": "PiVPN Notes", "type": "article", "uri": "PiVPN_Notes" } ], "html": "\n\n \n \n \n \n \n \n \n \n \n \n \n PiVPN Notes – Nikhil's Personal Wiki\n \n \n \n \n \n
\n
\n \n
\n
\n \n \n\n

PiVPN Notes\n \n

\n

Install via the highly-regarded curl and bash combo.

\n
curl -L https://install.pivpn.io | bash\n

You must run pivpn debug after this! This will add MASQUERADE rules to iptables. Else you won’t be able to access devices on the local network. Here’s some sample output from iptables-save:

\n
# Generated by iptables-save v1.8.9 (nf_tables) on Mon Jan 22 20:23:02 2024\n*filter\n:INPUT ACCEPT [539667:80844193]\n:FORWARD ACCEPT [9052:4464611]\n:OUTPUT ACCEPT [329479:41880851]\n-A INPUT -i wg0 -p udp -m udp --dport 53 -m comment --comment pihole-DNS-rule -j ACCEPT\n-A INPUT -i wg0 -p udp -m udp --dport 53 -m comment --comment pihole-DNS-rule -j ACCEPT\n-A INPUT -i eth0 -p udp -m udp --dport 58120 -m comment --comment wireguard-input-rule -j ACCEPT\n-A INPUT -i wg0 -p udp -m udp --dport 53 -m comment --comment pihole-DNS-rule -j ACCEPT\n-A INPUT -i wg0 -p udp -m udp --dport 53 -m comment --comment pihole-DNS-rule -j ACCEPT\nCOMMIT\n# Completed on Mon Jan 22 20:23:02 2024\n# Generated by iptables-save v1.8.9 (nf_tables) on Mon Jan 22 20:23:02 2024\n*nat\n:PREROUTING ACCEPT [66794:5901902]\n:INPUT ACCEPT [66250:5815572]\n:OUTPUT ACCEPT [49939:3627320]\n:POSTROUTING ACCEPT [50130:3649317]\n-A POSTROUTING -s 192.116.240.0/24 -o eth0 -m comment --comment wireguard-nat-rule -j MASQUERADE\n-A POSTROUTING -s 192.236.34.0/24 -o eth0 -m comment --comment wireguard-nat-rule -j MASQUERADE\n-A POSTROUTING -s 192.134.161.0/24 -o eth0 -m comment --comment wireguard-nat-rule -j MASQUERADE\n-A POSTROUTING -s 192.165.64.0/24 -o eth0 -m comment --comment wireguard-nat-rule -j MASQUERADE\nCOMMIT\n# Completed on Mon Jan 22 20:23:02 2024\n
\n

and an accompanying client configuration:

\n
[Interface]\nPrivateKey = <Whatever_This_is>\nAddress = 192.116.240.2/24\nDNS = 192.168.1.7, 1.1.1.1, 1.0.0.1\n\n[Peer]\nPublicKey = <Whatever_This_is>\nPresharedKey = <Whatever_This_is>\nAllowedIPs = 0.0.0.0/0\nEndpoint = 171.172.173.174:58120\n
\n\n\n
\n \n
\n \n \n \n \n \n\n", "id": "80dcafc8-c16a-56c8-b497-11c5ede727d4", "modified": "2026-05-28T13:06:21Z", "revisions": [ { "authorEmail": "mail@nikhil.io", "authorName": "Nikhil Anand", "date": "2026-05-28T13:06:21Z", "id": "d9514e1821d59f4d0368b0e1b755d198a4947741", "shortId": "d9514e18", "subject": "Formatting fixes -- Claude\n", "content": "Install via the highly-regarded `curl` and `bash` combo.\n\n```bash\ncurl -L https://install.pivpn.io | bash\n```\n\nYou _must_ run `pivpn debug` after this! This will add `MASQUERADE` rules to `iptables`. Else you won't be able to access devices on the local network. Here's some sample output from `iptables-save`:\n\n```\n# Generated by iptables-save v1.8.9 (nf_tables) on Mon Jan 22 20:23:02 2024\n*filter\n:INPUT ACCEPT [539667:80844193]\n:FORWARD ACCEPT [9052:4464611]\n:OUTPUT ACCEPT [329479:41880851]\n-A INPUT -i wg0 -p udp -m udp --dport 53 -m comment --comment pihole-DNS-rule -j ACCEPT\n-A INPUT -i wg0 -p udp -m udp --dport 53 -m comment --comment pihole-DNS-rule -j ACCEPT\n-A INPUT -i eth0 -p udp -m udp --dport 58120 -m comment --comment wireguard-input-rule -j ACCEPT\n-A INPUT -i wg0 -p udp -m udp --dport 53 -m comment --comment pihole-DNS-rule -j ACCEPT\n-A INPUT -i wg0 -p udp -m udp --dport 53 -m comment --comment pihole-DNS-rule -j ACCEPT\nCOMMIT\n# Completed on Mon Jan 22 20:23:02 2024\n# Generated by iptables-save v1.8.9 (nf_tables) on Mon Jan 22 20:23:02 2024\n*nat\n:PREROUTING ACCEPT [66794:5901902]\n:INPUT ACCEPT [66250:5815572]\n:OUTPUT ACCEPT [49939:3627320]\n:POSTROUTING ACCEPT [50130:3649317]\n-A POSTROUTING -s 192.116.240.0/24 -o eth0 -m comment --comment wireguard-nat-rule -j MASQUERADE\n-A POSTROUTING -s 192.236.34.0/24 -o eth0 -m comment --comment wireguard-nat-rule -j MASQUERADE\n-A POSTROUTING -s 192.134.161.0/24 -o eth0 -m comment --comment wireguard-nat-rule -j MASQUERADE\n-A POSTROUTING -s 192.165.64.0/24 -o eth0 -m comment --comment wireguard-nat-rule -j MASQUERADE\nCOMMIT\n# Completed on Mon Jan 22 20:23:02 2024\n```\n\nand an accompanying client configuration:\n\n```\n[Interface]\nPrivateKey = \nAddress = 192.116.240.2/24\nDNS = 192.168.1.7, 1.1.1.1, 1.0.0.1\n\n[Peer]\nPublicKey = \nPresharedKey = \nAllowedIPs = 0.0.0.0/0\nEndpoint = 171.172.173.174:58120\n```\n" }, { "authorEmail": "mail@nikhil.io", "authorName": "Nikhil Anand", "date": "2026-01-13T18:47:28Z", "id": "2436477560f26e23d00a24add1cbfeafdca4af78", "shortId": "24364775", "subject": "No compression\n", "content": "Install via the highly-regarded `curl` and `bash` combo. \n\n```bash\ncurl -L https://install.pivpn.io | bash\n```\n\nYou _must_ run `pivpn debug` after this! This will add `MASQUERADE` rules to `iptables`. Else you won't be able to access devices on the local network. Here's some sample output from `iptables-save`:\n\n```\n# Generated by iptables-save v1.8.9 (nf_tables) on Mon Jan 22 20:23:02 2024\n*filter\n:INPUT ACCEPT [539667:80844193]\n:FORWARD ACCEPT [9052:4464611]\n:OUTPUT ACCEPT [329479:41880851]\n-A INPUT -i wg0 -p udp -m udp --dport 53 -m comment --comment pihole-DNS-rule -j ACCEPT\n-A INPUT -i wg0 -p udp -m udp --dport 53 -m comment --comment pihole-DNS-rule -j ACCEPT\n-A INPUT -i eth0 -p udp -m udp --dport 58120 -m comment --comment wireguard-input-rule -j ACCEPT\n-A INPUT -i wg0 -p udp -m udp --dport 53 -m comment --comment pihole-DNS-rule -j ACCEPT\n-A INPUT -i wg0 -p udp -m udp --dport 53 -m comment --comment pihole-DNS-rule -j ACCEPT\nCOMMIT\n# Completed on Mon Jan 22 20:23:02 2024\n# Generated by iptables-save v1.8.9 (nf_tables) on Mon Jan 22 20:23:02 2024\n*nat\n:PREROUTING ACCEPT [66794:5901902]\n:INPUT ACCEPT [66250:5815572]\n:OUTPUT ACCEPT [49939:3627320]\n:POSTROUTING ACCEPT [50130:3649317]\n-A POSTROUTING -s 192.116.240.0/24 -o eth0 -m comment --comment wireguard-nat-rule -j MASQUERADE\n-A POSTROUTING -s 192.236.34.0/24 -o eth0 -m comment --comment wireguard-nat-rule -j MASQUERADE\n-A POSTROUTING -s 192.134.161.0/24 -o eth0 -m comment --comment wireguard-nat-rule -j MASQUERADE\n-A POSTROUTING -s 192.165.64.0/24 -o eth0 -m comment --comment wireguard-nat-rule -j MASQUERADE\nCOMMIT\n# Completed on Mon Jan 22 20:23:02 2024\n```\n\nand an accompanying client configuration:\n\n```\n[Interface]\nPrivateKey = \nAddress = 192.116.240.2/24\nDNS = 192.168.1.7, 1.1.1.1, 1.0.0.1\n\n[Peer]\nPublicKey = \nPresharedKey = \nAllowedIPs = 0.0.0.0/0\nEndpoint = 171.172.173.174:58120\n```\n\n" }, { "authorEmail": "mail@nikhil.io", "authorName": "Nikhil Anand", "date": "2024-04-15T23:21:58Z", "id": "4b2d73989d92e9602a635c4b492f41d43673e735", "shortId": "4b2d7398", "subject": "Merge branch 'master' of github.com:afreeorange/wiki.nikhil.io.articles\n", "content": "Install via the highly-regarded `curl` and `bash` combo. \n\n```bash\ncurl -L https://install.pivpn.io | bash\n```\n\nYou _must_ run `pivpn debug` after this! This will add `MASQUERADE` rules to `iptables`. Else you won't be able to access devices on the local network. Here's some sample output from `iptables-save`:\n\n```\n# Generated by iptables-save v1.8.9 (nf_tables) on Mon Jan 22 20:23:02 2024\n*filter\n:INPUT ACCEPT [539667:80844193]\n:FORWARD ACCEPT [9052:4464611]\n:OUTPUT ACCEPT [329479:41880851]\n-A INPUT -i wg0 -p udp -m udp --dport 53 -m comment --comment pihole-DNS-rule -j ACCEPT\n-A INPUT -i wg0 -p udp -m udp --dport 53 -m comment --comment pihole-DNS-rule -j ACCEPT\n-A INPUT -i eth0 -p udp -m udp --dport 58120 -m comment --comment wireguard-input-rule -j ACCEPT\n-A INPUT -i wg0 -p udp -m udp --dport 53 -m comment --comment pihole-DNS-rule -j ACCEPT\n-A INPUT -i wg0 -p udp -m udp --dport 53 -m comment --comment pihole-DNS-rule -j ACCEPT\nCOMMIT\n# Completed on Mon Jan 22 20:23:02 2024\n# Generated by iptables-save v1.8.9 (nf_tables) on Mon Jan 22 20:23:02 2024\n*nat\n:PREROUTING ACCEPT [66794:5901902]\n:INPUT ACCEPT [66250:5815572]\n:OUTPUT ACCEPT [49939:3627320]\n:POSTROUTING ACCEPT [50130:3649317]\n-A POSTROUTING -s 192.116.240.0/24 -o eth0 -m comment --comment wireguard-nat-rule -j MASQUERADE\n-A POSTROUTING -s 192.236.34.0/24 -o eth0 -m comment --comment wireguard-nat-rule -j MASQUERADE\n-A POSTROUTING -s 192.134.161.0/24 -o eth0 -m comment --comment wireguard-nat-rule -j MASQUERADE\n-A POSTROUTING -s 192.165.64.0/24 -o eth0 -m comment --comment wireguard-nat-rule -j MASQUERADE\nCOMMIT\n# Completed on Mon Jan 22 20:23:02 2024\n```\n\nand an accompanying client configuration:\n\n```\n[Interface]\nPrivateKey = \nAddress = 192.116.240.2/24\nDNS = 192.168.1.7, 1.1.1.1, 1.0.0.1\n\n[Peer]\nPublicKey = \nPresharedKey = \nAllowedIPs = 0.0.0.0/0\nEndpoint = 171.172.173.174:58120\n```\n\n" }, { "authorEmail": "mail@nikhil.io", "authorName": "Nikhil Anand", "date": "2024-01-23T02:27:10Z", "id": "0524544730b4e28479fe5df8b6df8b09b74c81ea", "shortId": "05245447", "subject": "Initial commit\n", "content": "Install via the highly-regarded `curl` and `bash` combo. \n\n```bash\ncurl -L https://install.pivpn.io | bash\n```\n\nYou _must_ run `pivpn debug` after this! This will add `MASQUERADE` rules to `iptables`. Else you won't be able to access devices on the local network. Here's some sample output from `iptables-save`:\n\n```\n# Generated by iptables-save v1.8.9 (nf_tables) on Mon Jan 22 20:23:02 2024\n*filter\n:INPUT ACCEPT [539667:80844193]\n:FORWARD ACCEPT [9052:4464611]\n:OUTPUT ACCEPT [329479:41880851]\n-A INPUT -i wg0 -p udp -m udp --dport 53 -m comment --comment pihole-DNS-rule -j ACCEPT\n-A INPUT -i wg0 -p udp -m udp --dport 53 -m comment --comment pihole-DNS-rule -j ACCEPT\n-A INPUT -i eth0 -p udp -m udp --dport 58120 -m comment --comment wireguard-input-rule -j ACCEPT\n-A INPUT -i wg0 -p udp -m udp --dport 53 -m comment --comment pihole-DNS-rule -j ACCEPT\n-A INPUT -i wg0 -p udp -m udp --dport 53 -m comment --comment pihole-DNS-rule -j ACCEPT\nCOMMIT\n# Completed on Mon Jan 22 20:23:02 2024\n# Generated by iptables-save v1.8.9 (nf_tables) on Mon Jan 22 20:23:02 2024\n*nat\n:PREROUTING ACCEPT [66794:5901902]\n:INPUT ACCEPT [66250:5815572]\n:OUTPUT ACCEPT [49939:3627320]\n:POSTROUTING ACCEPT [50130:3649317]\n-A POSTROUTING -s 192.116.240.0/24 -o eth0 -m comment --comment wireguard-nat-rule -j MASQUERADE\n-A POSTROUTING -s 192.236.34.0/24 -o eth0 -m comment --comment wireguard-nat-rule -j MASQUERADE\n-A POSTROUTING -s 192.134.161.0/24 -o eth0 -m comment --comment wireguard-nat-rule -j MASQUERADE\n-A POSTROUTING -s 192.165.64.0/24 -o eth0 -m comment --comment wireguard-nat-rule -j MASQUERADE\nCOMMIT\n# Completed on Mon Jan 22 20:23:02 2024\n```\n\nand an accompanying client configuration:\n\n```\n[Interface]\nPrivateKey = \nAddress = 192.116.240.2/24\nDNS = 192.168.1.7, 1.1.1.1, 1.0.0.1\n\n[Peer]\nPublicKey = \nPresharedKey = \nAllowedIPs = 0.0.0.0/0\nEndpoint = 171.172.173.174:58120\n```\n\n" } ], "sizeInBytes": 1930, "source": "Install via the highly-regarded `curl` and `bash` combo.\n\n```bash\ncurl -L https://install.pivpn.io | bash\n```\n\nYou _must_ run `pivpn debug` after this! This will add `MASQUERADE` rules to `iptables`. Else you won't be able to access devices on the local network. Here's some sample output from `iptables-save`:\n\n```\n# Generated by iptables-save v1.8.9 (nf_tables) on Mon Jan 22 20:23:02 2024\n*filter\n:INPUT ACCEPT [539667:80844193]\n:FORWARD ACCEPT [9052:4464611]\n:OUTPUT ACCEPT [329479:41880851]\n-A INPUT -i wg0 -p udp -m udp --dport 53 -m comment --comment pihole-DNS-rule -j ACCEPT\n-A INPUT -i wg0 -p udp -m udp --dport 53 -m comment --comment pihole-DNS-rule -j ACCEPT\n-A INPUT -i eth0 -p udp -m udp --dport 58120 -m comment --comment wireguard-input-rule -j ACCEPT\n-A INPUT -i wg0 -p udp -m udp --dport 53 -m comment --comment pihole-DNS-rule -j ACCEPT\n-A INPUT -i wg0 -p udp -m udp --dport 53 -m comment --comment pihole-DNS-rule -j ACCEPT\nCOMMIT\n# Completed on Mon Jan 22 20:23:02 2024\n# Generated by iptables-save v1.8.9 (nf_tables) on Mon Jan 22 20:23:02 2024\n*nat\n:PREROUTING ACCEPT [66794:5901902]\n:INPUT ACCEPT [66250:5815572]\n:OUTPUT ACCEPT [49939:3627320]\n:POSTROUTING ACCEPT [50130:3649317]\n-A POSTROUTING -s 192.116.240.0/24 -o eth0 -m comment --comment wireguard-nat-rule -j MASQUERADE\n-A POSTROUTING -s 192.236.34.0/24 -o eth0 -m comment --comment wireguard-nat-rule -j MASQUERADE\n-A POSTROUTING -s 192.134.161.0/24 -o eth0 -m comment --comment wireguard-nat-rule -j MASQUERADE\n-A POSTROUTING -s 192.165.64.0/24 -o eth0 -m comment --comment wireguard-nat-rule -j MASQUERADE\nCOMMIT\n# Completed on Mon Jan 22 20:23:02 2024\n```\n\nand an accompanying client configuration:\n\n```\n[Interface]\nPrivateKey = \nAddress = 192.116.240.2/24\nDNS = 192.168.1.7, 1.1.1.1, 1.0.0.1\n\n[Peer]\nPublicKey = \nPresharedKey = \nAllowedIPs = 0.0.0.0/0\nEndpoint = 171.172.173.174:58120\n```\n", "title": "PiVPN Notes", "untracked": false, "uri": "/PiVPN_Notes", "relativePath": "PiVPN Notes.md" }