10_wg.example

## Example wireguard config (experimental):

[Service]
Type=oneshot
Restart=no
RemainAfterExit=true

Environment="filter_opts="

Environment="client_cmd="
Environment="client_cmd=/tmp/wg-quick"

Environment="client_opt1="
Environment="client_opt1=up /tmp/qtunnel.conf"
Environment="client_opt2="
Environment="client_opt3="
Environment="client_opt4="
Environment="client_opt5="

Environment="userpassword_opt="

# Override wg-quick DNS functions:
ExecStartPre=/bin/cp -a -L /usr/bin/wg-quick /tmp
ExecStartPre=/bin/sed -i "/~~ function override insertion point/a set_dns() { export tunnel_dns=\$DNS; /usr/lib/qubes/qtunnel-connect up; HAVE_SET_DNS=1; }" /tmp/wg-quick
ExecStartPre=/bin/sed -i "/~~ function override insertion point/a unset_dns() { /usr/lib/qubes/qtunnel-connect down; }" /tmp/wg-quick

# Workaround: Allow wg access to net
ExecStartPre=/sbin/iptables -P OUTPUT ACCEPT

ExecStop=/tmp/wg-quick down /tmp/qtunnel.conf