How to Set Up a WireGuard VPN Server on Linux

If you want secure, fast remote access to your home network or homelab, setting up a WireGuard VPN server on Linux is one of the best options available today. It’s simpler to configure than older VPN protocols like OpenVPN, uses modern cryptography, and delivers noticeably better speeds with minimal overhead — making it a favorite among self-hosters and sysadmins alike.

What Is WireGuard?

WireGuard is a modern, open-source VPN protocol built directly into the Linux kernel since version 5.6. Unlike traditional VPN solutions that rely on complex configuration files and heavier encryption stacks, WireGuard uses a small, auditable codebase and state-of-the-art cryptographic primitives. The result is a VPN that’s easier to set up, faster to connect, and simpler to maintain long-term.

Why Use WireGuard on Your Home Server

• Speed – WireGuard consistently outperforms OpenVPN in throughput and latency benchmarks
• Simplicity – configuration is based on just a handful of settings per peer, unlike OpenVPN’s certificate-heavy setup
• Low resource usage – ideal for low-power devices like Raspberry Pi or mini PCs
• Strong security – uses modern cryptography (Curve25519, ChaCha20, Poly1305) with no legacy cipher baggage

Installing WireGuard

On Ubuntu or Debian-based systems, installation only takes one command:

sudo apt update
sudo apt install wireguard -y

Once installed, generate a public/private key pair for the server:

wg genkey | tee privatekey | wg pubkey > publickey

Creating the Server Configuration

Create a configuration file at /etc/wireguard/wg0.conf containing the server’s private key, its internal VPN IP address, and the listening port (commonly 51820). Each client you want to connect will need its own key pair added as a [Peer] block in this file, along with the IP address assigned to that client inside the VPN’s private subnet.

Starting the VPN Interface

Bring the VPN interface online with:

sudo wg-quick up wg0

To make sure WireGuard starts automatically after every reboot:

sudo systemctl enable wg-quick@wg0

Connecting Client Devices

Client setup mirrors the server: generate a key pair, configure the server’s public key and endpoint address, then import the configuration into the official WireGuard app (available for Windows, macOS, Android, and iOS) or via command line on another Linux machine.

Final Thoughts

Setting up a WireGuard VPN server on Linux gives you a secure tunnel back into your home network from anywhere, whether you’re accessing a Proxmox dashboard, a NAS, or self-hosted services remotely. Its simplicity and performance make it the go-to choice for homelab and server admins who previously relied on heavier, more complex VPN protocols.