How to configure Wireguard in LibreElec 9.2.6

t3rr0rz0n3 · January 18, 2021 at 4:11 PM

I am trying to configure my VPN in LibreELEC using WireGuard. I am currently using the Xeovo VPN service. They train me the Wireguard configuration as follows:

Code

[Interface]
Address = 10.128.XX.XXX
PrivateKey = [PrivateKey]
DNS = 10.128.0.1

[Peer]
PublicKey = [PublicKey]
AllowedIPs = 0.0.0.0/0
Endpoint = fr.gw.xeovo.com:51820

Generally, with any Wireguard client adding this configuration it works fine. I have seen in the LibreELEC documentation that it should be added as follows: WireGuard - LibreELEC.wiki. I tried to add the following configuration but it doesn't work:

Code

[Xeovo]
Type = WireGuard
Name = Xeovo 
Host = fr.gw.xeovo.com
WireGuard.Address = 10.128.XX.XXX/32
WireGuard.ListenPort = 51820
WireGuard.PrivateKey = [PrivateKey]
WireGuard.PublicKey = [PublicKey]
WireGuard.DNS = 1.1.1.1
WireGuard.AllowedIPs = 0.0.0.0/0
WireGuard.EndpointPort = 51820
WireGuard.PersistentKeepalive = 25

Display More

I have tried several configurations. Using the DNS offered by Xeovo, changing the domain for the IP in Host . But it doesn't work.

I try to run connmanctl services to see if it detects the configuration and does not appear.

I have even tried to configure a Wireguard in local and it seems to detect it.

Previously also provided with some IP and does not seem to work. According to the documentation, they say that Wireguard's tunnels are managed by a service called ConnMan VPN plugin (connman-vpn.service), I see in the logs the following error:

Code

Jan 18 16:49:05 LibreELEC connman-vpnd[278]: Config file /storage/.config/wireguard/xeovo.config does not contain any configuration that can be provisioned!

Do I have to put in WireGuard.PrivateKey and WireGuard.PublicKey the data that Xeovo sends me? Or should I create my PublicKey?

Could someone tell me what I'm doing wrong?

Regards,

T3rr0rz0n3

**Da Flex** · January 18, 2021 at 6:42 PM Official Post

Did you used our search function? Results for "Wireguard": Click!

**chewitt** · January 18, 2021 at 7:29 PM Official Post

Replace [Xeovo] with [provider_wireguard] and change fr.gw.xeovo.com to an IP address.

t3rr0rz0n3 · January 18, 2021 at 7:43 PM

Quote from Da Flex

Did you used our search function? Results for "Wireguard": Click!

Of course I know the search function. That's why I decided to write, because I didn't find anything that could help me solve my problem. Thanks for the information.

Quote from chewitt

Replace [Xeovo] with [provider_wireguard] and change fr.gw.xeovo.com to an IP address.

Thank you for responding. I tried that too, actually this is the configuration I have:

Code

[provider_wireguard]
Type = WireGuard
Name = Xeovo FR WG
Host = 51.158.127.210
WireGuard.Address = 10.128.X.XXX/32
WireGuard.ListenPort = 51820
WireGuard.PrivateKey = PrivateKey
WireGuard.PublicKey = PublicKey
WireGuard.DNS = 10.128.0.1
WireGuard.AllowedIPs = 0.0.0.0/0
WireGuard.EndpointPort = 51820
WireGuard.PersistentKeepalive = 25

Display More

But it still doesn't work, connman-vpnd seems not to detect my configuration I even tried 8.8.8 or 1.1.1.1 in WireGuard.DNS

Regards,
T3rr0rz0n3

elonesna · January 18, 2021 at 11:14 PM

Here is a mini tutorial for CoreELEC and LibreELEC, to start up a WireGuard server and client in less than ten minutes, I wrote it on the CoreELEC website a few days ago with the information from the libreelec, coreelec, linuxserver, github and hub.docker sites:

Install a WireGuard VPN client & server in a few minutes - Guides & How-tos - CoreELEC Forums

t3rr0rz0n3 · January 19, 2021 at 8:59 AM

Thanks elonesna! But I understand that this is to use Raspberry Pi as a WireGuard server, right? I would need to set up an external VPN server.

elonesna · January 19, 2021 at 11:12 AM

Quote from t3rr0rz0n3

Thanks elonesna! But I understand that this is to use Raspberry Pi as a WireGuard server, right? I would need to set up an external VPN server.

This tutorial is for Raspberry Pi and any other device that uses LibreELEC or CoreELEC. It has two parts: (1) How to create and launch a WireGuard server, and (2) how to create and launch a WireGuard client.

If you already have a WireGuard server then you will only need a WireGuard client. If you want to create a network of connected devices then some of them will need to be the server and the rest the clients.

If you don't know what a VPN server or VPN client is, then you have to study a bit first.

t3rr0rz0n3 · January 19, 2021 at 1:06 PM

Quote from elonesna

This tutorial is for Raspberry Pi and any other device that uses LibreELEC or CoreELEC. It has two parts: (1) How to create and launch a WireGuard server, and (2) how to create and launch a WireGuard client.
If you already have a WireGuard server then you will only need a WireGuard client. If you want to create a network of connected devices then some of them will need to be the server and the rest the clients.
If you don't know what a VPN server or VPN client is, then you have to study a bit first.

As I mentioned in my first message, I tried to configure WireGuard in LibreElec and that configuration works fine. It doesn't make sense to have a local VPN, mostly because you'll leave with the IP of your router.

Your tutorial surely works, but it has nothing to do with what I need to do. I only need to do the second part, but with an external VPN. That is, reproduce what you explain in real life. A "local" VPN is useless.

Any ideas? What's wrong with my configuration?

Regards,
T3rr0rz0n3

**chewitt** · January 19, 2021 at 4:33 PM Official Post

Random guess .. was the config file created in Windows Notepad.exe? .. If yes it has Windows line endings which will probably cause issues.

t3rr0rz0n3 · January 19, 2021 at 4:39 PM

Quote from chewitt

Random guess .. was the config file created in Windows Notepad.exe? .. If yes it has Windows line endings which will probably cause issues.

The file was created using nano from SSH (In Kubuntu)

Regards,
T3rr0rz0n3

departy · July 5, 2021 at 10:25 AM

When there would be an option to use fqdn instead of an IP address? In my country, the IPs are changing every week and its awful!

elonesna · July 5, 2021 at 12:52 PM

Quote from departy

When there would be an option to use fqdn instead of an IP address? In my country, the IPs are changing every week and its awful!

If you think that WireGuard is very complicated (it really is not, although it needs the opening of router ports from the WG server network and also allows the use of DDNS in the WG clients (1) replacing the IP address) you can also try ZeroTier. The latter does not need to declare any public IP or open ports on any router.

(1) Example: myddns.duckdns.org, and you need to update the IP address of the DDNS (I do this in /storage/.config/autostart.sh of the WG server (Example: wget -qO- "$@" "https://duckdns.org/update/<myddns>/<myduckdns-token>" > /dev/null 2>&1).