Download configuration button provides incomplete configuration file

dmilton · Oct 27, 2024, 10:21 PM

I am in the process of setting up a tunnel to provide IPv6 service over WireGuard. I wanted to have a backup of the configuration so I could reproduce it should that be necessary. What I discovered is that for a static peer the configuration is incomplete.

I've inserted <hidden> for the keys but this is the configuration I get from the "Download Configuration" button:

Description: IPv6

[Interface]
PrivateKey = <hidden>
ListenPort = 51823

Peer: IPv6

[Peer]
PublicKey = <hidden>
PresharedKey = <hidden>
AllowedIPs = 2620:132:3002:1014::/64
PersistentKeepalive = 30

Ideally, it would be nice to have the Address statement in the interface section but I understand that may be a challenge because it is elsewhere in the pfSense interface.

What I find a significant problem is this is a static peer (dynamic is not checked) and I have entered the endpoint IP and port but this information is not part of the exported/saved configuration. The above configuration needs:
Endpoint = IP:port
to be complete.