edgesecurityaccess-wireguard-vpn

What problem does it solve?

This Skill helps you set up a secure, private VPN network using EdgeSecurityAccess (ESA) and WireGuard so users can reliably connect without manual WireGuard configuration per person.

Core Features & Use Cases

• WireGuard VPN server deployment: Build and run the ESA mainframe (Go server) that serves WireGuard client configs via an authenticated HTTP API.
• Automated user provisioning: Use ESA utility tools to create VPN users, manage WireGuard peer settings, and generate per-user configuration files from a users database.
• Client connectivity and troubleshooting: Initialize local WireGuard, connect from Linux/macOS CLI or the Windows desktop client, and apply practical diagnostics for common failures.
• HTTP-to-HTTPS protection: Place the ESA HTTP API behind a reverse proxy (Nginx or Caddy) to reduce credential exposure during transit.
• Use Case: Onboard multiple team members to a shared VPN subnet by adding them to users.txt, generating usrwg.conf, and letting each user fetch their WireGuard config through the authenticated API.

Quick Start

Use the edgesecurityaccess-wireguard-vpn skill to install and build ESA on Linux, generate ESA configuration and keys, create users with ESAusr, generate client configs with ESAProc, initialize wg0 with ESAInit, and then connect a client by requesting their WireGuard config through the ESA HTTP API.