>>102113869
Yunohost doesn't use VMs as far as I know, so it's just client->router->yunohost/wireguard server
I got the handshake working because turns out I had to add it in yunohost's firewall settings. Now that it's properly open I can connect to wireguard, I just can't connect to anything else via wireguard.
>>102113905
ip_forward is 1, and the server has a post up script:
iptables -A FORWARD -i %i -j ACCEPT; iptables -A FORWARD -o %i -j ACCEPT; iptables -t nat -A POSTROUTING -o enp3s0 -j MASQUERADE; ip6tables -A FORWARD -i %i -j ACCEPT; ip6tables -A FORWARD -o %i -j ACCEPT; ip6tables -t nat -A POSTROUTING -o enp3s0 -j MASQUERADE; ip link set multicast on dev %i
And post down script
iptables -D FORWARD -i %i -j ACCEPT; iptables -D FORWARD -o %i -j ACCEPT; iptables -t nat -D POSTROUTING -o enp3s0 -j MASQUERADE; ip6tables -D FORWARD -i %i -j ACCEPT; ip6tables -D FORWARD -o %i -j ACCEPT; ip6tables -t nat -D POSTROUTING -o enp3s0 -j MASQUERADE
Which I'm guessing covers that, but maybe not, again I'm not good at this.
>>102113908
The allowed IPs are 0.0.0.0/0, but the allocated IP isn't ,if that's what you mean. Maybe this configuration is wrong too I dunno.
Also the empty endpoint field doesn't mean it doesn't have an endpoint, I thought that too initially but it just means it uses the default endpoint, I found out by checking my client's settings.