#!/bin/bash

# ========== 配置参数（直接修改这里）==========
PRIVATE_KEY="UPLUN7lW+oNFKkj923OYeZ3NJ1bcDOmJNhKAdj1D7EI="
ADDRESS="192.168.13.2/32"
LISTEN_PORT="51820"
PEER_PUB_KEY="8gqJ5cAfQt8FoXaqNRiouNf+zYKW7CFr/L8C+b+CQT8="
PEER_PSK="8VcmCx+XRriPKNKVNSaP6k2Fv3ZncHYT+++6vE2rIhI="
PEER_ALLOWED_IPS="192.168.13.0/24"
PEER_ENDPOINT="43.106.123.45:51820"
# ==========================================

echo "启动 WireGuard..."

ip link add dev wg0 type wireguard
wg set wg0 private-key <(echo "$PRIVATE_KEY") listen-port "$LISTEN_PORT"
wg set wg0 peer "$PEER_PUB_KEY" preshared-key <(echo "$PEER_PSK") allowed-ips "$PEER_ALLOWED_IPS" endpoint "$PEER_ENDPOINT" persistent-keepalive 25
ip address add "$ADDRESS" dev wg0
ip link set up dev wg0
ip route add "$PEER_ALLOWED_IPS" dev wg0 2>/dev/null || true

echo "完成！"
wg show