This is an automated archive.

The original was posted on /r/wireguard by /u/Wild_Competition4508 on 2023-09-12 16:22:56+00:00.

---

I am stuck behind CGNAT and want to use a Wireguard VPS and a Wireguard Raspberry to forward 443 traffic to port 8123 on my Home Assistant Raspberry.

VPS - Wireguard

Public 95.217.101.15 (Fixed IP and fake)

WG0 10.0.0.1

Raspberry - Wireguard

Public none (CGNAT)

WG0 10.0.0.2

Eth0 192.168.1.179

Raspberry - Home Assistant Operating System

Public none (CGNAT)

Eth0 192.168.1.170

Home Assistant GUI is on port 8123 (not changeable to 443)

The VPN tunnel is UP and 10.0.0.1 and 10.0.0.2 can ping each other.

DummyHA.duckdns.org points to the VPS Public IP and the LetsEncrypt cert is automatically renewed and installed on the Home Assistant Raspberry

I want to access my Home Asssitant using my smartphone pointing to

So incoming traffic on 443 on the VPS should go through the tunnel and be sent from Raspberry WireGuard to Raspberry Home Assistant 8123.

I tried the guide here . He has a similar setup but he changes his requirements half way through confusing the hell out of me.

What lines should I put in the Interface section of the wg0.conf on the VPS and the Raspberry?