mkdir -p /home/ju/scripts/wgpn/_generated
# SSH key
ssh-keygen -t ecdsa -b 256 -f /home/ju/scripts/wgpn/_generated/tf-wgpn -N '' -C 'terraform wgpn'
# WireGuard keys
wg genkey | tee /home/ju/scripts/wgpn/_generated/wg_server_private.key | wg pubkey > /home/ju/scripts/wgpn/_generated/wg_server_public.key
wg genkey | tee /home/ju/scripts/wgpn/_generated/wg_client_private.key | wg pubkey > /home/ju/scripts/wgpn/_generated/wg_client_public.key
chmod 600 /home/ju/scripts/wgpn/_generated/wg_server_private.key /home/ju/scripts/wgpn/_generated/wg_client_private.key /home/ju/scripts/wgpn/_generated/tf-wgpn

source openstack.openrc
tofu apply -var=my_public_ip=$(curl ident.me)
tf output -json | jq -r .wireguard_client_config.value | sudo tee /etc/wireguard/wgpn.conf