Deavmi's on-the-go

What is this?

Deavmi runs a Wireguard tunneling service for client-only (meaning you won't route other's traffic) access to CRXN.

The service is made available over the following networks:

  • Clearnet IPv6
    • This means you can connect your Wireguard endpoint to an IPV6 host (my server)
    • Endpoint address: 2a04:5b81:2010::65
  • Yggdrasil
    • This means you can run the Yggdrasil software and use an Yggdrasil IPv6 address as the Wireguard endpoint
    • Endpoint address: 301:754:2ca2:57f8::1

Setup procedure

Generate the private key

You need to generate a private-public key pair for your Wireguard instance.

wg genkey | sudo tee /etc/systemd/network/crxn0-private.key
chmod 600 /etc/systemd/network/crxn0-private.key

Fetch the public key

Get the public key from it (you will need to send that to deavmi):

sudo cat /etc/systemd/network/crxn0-private.key | wg pubkey

You can then send this to deavmi on BNET in the #crxn channel. You can also shoot him an email via

Configure a new wireguard device

sudo cat > /etc/systemd/network/crxn0.netdev <<EOF
Name = crxn0
Kind = wireguard
Description = wg peering with crxn over yggdrasil

PrivateKeyFile = /etc/systemd/network/crxn0-private.key
ListenPort = 51820

PublicKey = e0zNJwCyP+sD5oiF0QAkzrM3rJpmg1NeGxEHVCfBClM=
AllowedIPs = fd00::/8

# Depending on how you want to connect change the endpoint here (port remains constant)
Endpoint = [301:754:2ca2:57f8::1]:51820

Create the crxn network configuration file

sudo cat > /etc/systemd/network/ <<EOF


## Uncomment and change this to your IP address
# Address=fdf1:1dc1:f54d:0001::1/64 # CHANGE THIS !!!!
## Uncomment to route packets from another interface, ie eth0
# AddPrefixRoute=false



Restart the service to apply all changes

sudo systemctl restart systemd-networkd

I would like to thank zhoreeq for providing the configuration files above.