wgcf-connector

Extract Cloudflare Mesh (formerly WARP Connector) WireGuard configuration.

Cloudflare Mesh is an overlay network like ZeroTier and Tailscale but instead of peer-to-peer, you connect to the nearest Cloudflare PoP using WireGuard just like NordVPN Meshnet.
Finally, a free site-to-site VPN from Cloudflare.

This program uses the warp-cli Linux client, installs it inside the Docker container, register Cloudflare Mesh with the token, and then extract the configuration file.

Usage

1. Make sure you have a device profile set to WireGuard for the Cloudflare Mesh node.
2. Create a Mesh node in Cloudflare dashboard.
3. Copy the generated Cloudflare Mesh token that starts with eyJhIjoi and ends with In0=, and paste it as argument <token> in Docker.
4. It will output wgcf-connector-<registration_id>.conf file in your current working directory, which you can use in WireGuard.

Tip

If you got an endpoint IPv4 address starting with 162.159.192.x, use 162.159.193.x instead to have lower latency.

Tip

You can check out my complete tutorial here.

Pull image remotely

Tip

You can use GitHub Codespaces for this.

docker run --rm -v $(pwd):/app/output ghcr.io/animmouse/wgcf-connector <token>

Build image locally

docker build -t wgcf-connector .
docker run --rm -v $(pwd):/app/output wgcf-connector <token>