TurnKey WireGuard

Note to AWS Marketplace users, who have NOT enabled root:
some of these commands may require root privileges, so may need to be prefixed with sudo.

Create a client profile

wireguard-addclient client-name [private-subnet]

Create auto-expiring obfuscated client profile download url

/var/www/wireguard/bin/addprofile client-name

Manually trigger deletion of expired profile download urls

/etc/cron.hourly/wireguard-profiles-delexpired