🐧

Linux Server WireGuard Setup Guide

Works on Ubuntu, Debian, RHEL, Fedora, CentOS, Arch, and any distro with systemd. The ProxyLink tunnel page generates a ready-to-run bash script that installs WireGuard and configures everything automatically.

Create a tunnel in ProxyLink

Go to Devices → + Add → Router / LAN site, select Public Server / Device, give it a label, and save. You'll land on the tunnel detail page.

Select Linux as your platform

On the tunnel page, choose 🐧 Linux from the platform picker. Then click Activate & Download Install Script — this downloads proxylink-setup.sh to your computer.

Copy the script to your server

From your local machine:

scp proxylink-setup.sh user@your-server-ip:~

Run the script

SSH into your server and run:

sudo bash proxylink-setup.sh

The script detects your package manager (apt / dnf / yum / pacman), installs wireguard-tools, writes the config to /etc/wireguard/proxylink.conf, and enables the tunnel as a systemd service. It starts automatically on reboot.

Verify the connection

Check tunnel status:

sudo wg show

You should see a latest handshake a few seconds after startup. On the ProxyLink tunnel page, the status will show Online.

Create a proxy link

Go to your device → + Add service. Set the target IP to your server's VPN IP (shown on the tunnel page) and the port of whatever service you're running. Your service is now accessible from anywhere.

Good to know

The tunnel name in systemd is "proxylink" — control it with: sudo systemctl start/stop/status wg-quick@proxylink

If you need to run multiple tunnels on the same server, rename the .conf file before running the script (e.g. proxylink2.conf) and adjust the systemctl command accordingly.

What you get once the tunnel is up

Browser RDP, VNC, and SSH — open a terminal or remote desktop to any device behind the tunnel straight from the ProxyLink dashboard. No client software, no open ports on your side.
Proxy links — share an HTTPS URL that forwards to any internal web interface (NAS, NVR cameras, PBX admin panels, router UIs) with ProxyLink login in front of it.
No public exposure — the device keeps zero open ports and needs no static IP. The tunnel is outbound-only WireGuard to EU-hosted infrastructure. Read more about agentless remote access and NIS2 compliance.

Ready to connect?

Create a free account and set up your first tunnel in minutes. Free during early access — no card required.

Start free → Other platforms

Setup guides for other platforms

🪟Windows 🍎macOS 🤖Android 📱iPhone / iPad 🔧OpenWrt 🌐GL.iNet 🗄️Synology NAS 📡Asus Merlin ⚙️MikroTik RouterOS 7 📶TP-Link 🛡️OPNsense 🔒pfSense 🔵Ubiquiti UniFi Gateway 🔷Ubiquiti EdgeRouter 📻Netgear 🔌Zyxel