book000/SSH over WireGuard
Establish secure encrypted connection to remote server via WireGuard VPN and execute SSH commands or SCP file transfers
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jul 10, 2026
- License
- None
Pinned Snippet
uses: book000/ssh-over-wireguard@c036c3655ef32223910497ef51ff305797735868 # v1tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| operation | Operation type: ssh (execute command) or scp (file transfer) | no | ssh |
| command | Command to execute on the remote server (only used when operation=ssh) | no | hostname && whoami && pwd |
| scp-source | Source path for SCP operation (only used when operation=scp) | no | — |
| scp-destination | Destination path for SCP operation (only used when operation=scp) | no | — |
| scp-direction | SCP direction: upload (local to remote) or download (remote to local) (only used when operation=scp) | no | upload |
| ping-check | Enable ping connectivity test before SSH/SCP operations | no | true |
| wireguard-private-key | WireGuard client private key | yes | — |
| wireguard-address | WireGuard client VPN address (e.g., 10.0.0.2/24) | yes | — |
| wireguard-dns | DNS server address (e.g., 1.1.1.1) | no | 1.1.1.1 |
| wireguard-peer-public-key | WireGuard server public key | yes | — |
| wireguard-preshared-key | WireGuard preshared key (optional security enhancement) | no | — |
| wireguard-endpoint | WireGuard server endpoint (e.g., server.com:51820) | yes | — |
| wireguard-allowed-ips | Allowed IPs for WireGuard (e.g., 10.0.0.0/24) | yes | — |
| ssh-private-key | SSH private key for authentication | yes | — |
| ssh-user | SSH username | yes | — |
| ssh-hostname | SSH hostname alias for connection | yes | — |
| ssh-host-ip | SSH server IP address within VPN | yes | — |
| ssh-host-key | SSH server host key for verification | yes | — |
| ssh-port | SSH port number | no | 22 |
Outputs
no outputs