OpenWRT WireGuard Simple Home VPN Tutorial
make sure you have dynamic dns set up or a static ip from your isp. this will not be covered in this tutorial
1. go to system-software
2. click update lists
3. install wireguard-tools, luci-app-wireguard, luci-proto-wireguard, qrencode
4. reboot your router at system-reboot
5. go to network-interfaces
6. add new interface name VPN, protocol WireGuardVPN
7. generate new key pair, set listen port to 51820, set ip addresses to chosen vpn subnet
8. go to firewall settings, set zone to lan
9. go to peers, click add peer, name of device you will be connecting with, generate new key pair, generate psk, set allowed ip in the same subnet, route allowed ips enabled
10. click generate configuration
11. on the device you're adding the vpn, open the wireguard app and scan the qr code
12. edit the newly created profile and enter the address you added in the peer
13. back on the firewall, go to network-firewall, then port forwards, and add a port forward
14. name it VPN and set the protocol to UDP. external port should be 51820, internal ip address should be first in subnet, internal port should be 51820