Your own WireGuard VPN in 5 minutes

Your server, your traffic, no third-party VPN company logging anything. Works on any Ubuntu VPS.

1. Server

Grab a plan on /vps — Buran-1 (€6.5) has a dedicated IP, which is what you want for VPN.

2. Install

ssh root@YOUR_SERVER_IP
apt update && apt install -y wireguard qrencode

3. Keys & config

wg genkey | tee /etc/wireguard/server.key | wg pubkey > /etc/wireguard/server.pub
cat > /etc/wireguard/wg0.conf <<'EOF'
[Interface]
Address = 10.66.66.1/24
ListenPort = 51820
PrivateKey = (insert server.key contents)
PostUp = iptables -A FORWARD -i wg0 -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
PostDown = iptables -D FORWARD -i wg0 -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE
EOF
# client
wg genkey | tee client.key | wg pubkey > client.pub
cat > client.conf <<'EOF'
[Interface]
PrivateKey = (client.key)
Address = 10.66.66.2/24
DNS = 1.1.1.1
[Peer]
PublicKey = (server.pub)
Endpoint = YOUR_SERVER_IP:51820
AllowedIPs = 0.0.0.0/0
PersistentKeepalive = 25
EOF
qrencode -t ansiutf8 < client.conf   # QR in terminal — scan with phone

4. Up & enable

systemctl enable --now wg-quick@wg0
sysctl -w net.ipv4.ip_forward=1
echo "net.ipv4.ip_forward=1" >> /etc/sysctl.conf

Scan the QR with the WireGuard app — you're tunnelled. Full plan list: /vps.