Wireguard
Installed wireguard and set up a tunnel to my VPS
apt update && apt install wireguard-tools iptables sudo git curl
cd /etc/wireguard
touch nl.conf
nc -n -l 9999 > nl.conf
// On PC with config
nc 192.168.1.51 9999 < client5.conf
wg-quick up nl
cd ~
curl ifconfig.so
You will have to add a route so it listens on the LAN interface for LAN connections. You can add this to your wg config above [PEER]
PostUp = ip route add 172.16.0.0/12 via 172.16.50.1 dev eth0
PostDown = ip route del 172.16.0.0/12 via 172.16.50.1 dev eth0
172.16.0.0/12 = LAN subnet
172.16.50.1 = thelounge VM / LXC default gateway
eth0 = LAN interface
NodeJS
From there I had to install nodeJS from the source repo as the debain trixie 12 apt version of nodeJS is too old.
curl -fsSL https://deb.nodesource.com/setup_22.x -o /tmp/ns.sh && bash /tmp/ns.sh
apt update && apt install -y nodejs
node -v
thelounge
wget https://github.com/thelounge/thelounge-deb/releases/download/v4.5.2/thelounge_4.5.2_all.deb
apt install -y ./thelounge_4.5.2_all.deb
/etc/thelounge/config.js is where you change the port, host address etc.
Start
Make account
thelounge add shark
Start:
sudo -u thelounge thelounge start
Using systemctl enable –now or start thelounge will bind it to it’s listening port before it starts and it will not start because it will attempt to and fail to rebind to a port it’s already binded to. Ensure the system service file is not started.
Mullvad caviat
If you are using mullvad you can use the CLI to allow this LAN connection.
mullvad lan set allow
mullvad tunnel set allowed-ips 172.16.0.0/12