From 729242a11466934f47690ddaf9a3465983b859e5 Mon Sep 17 00:00:00 2001 From: "Jason A. Donenfeld" Date: Thu, 18 May 2023 03:17:02 +0200 Subject: [PATCH] man: set private key in PreUp rather than PostUp This is probably more sensible, since there's no point in letting traffic flow before the interface is configured. Signed-off-by: Jason A. Donenfeld --- src/man/wg-quick.8 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/man/wg-quick.8 b/src/man/wg-quick.8 index b84eb64..bc9e145 100644 --- a/src/man/wg-quick.8 +++ b/src/man/wg-quick.8 @@ -168,7 +168,7 @@ sockets, which bypass Netfilter.) When IPv6 is in use, additional similar lines Or, perhaps it is desirable to store private keys in encrypted form, such as through use of .BR pass (1): - \fBPostUp = wg set %i private-key <(pass WireGuard/private-keys/%i)\fP + \fBPreUp = wg set %i private-key <(pass WireGuard/private-keys/%i)\fP .br For use on a server, the following is a more complicated example involving multiple peers: