Thanks for the WireGuard-Go guide. I'm still setting things up. About the loadtun.sh script: I don't understand how it would run at boot with the start parameter, as there is nothing telling it to do that after the command you give yourself. Or does it only need to be run with the start parameter initially?
On my old Synology I had set up a very similar script for the tun interface using a scheduled task running as root, running a script called tun.sh. Can this be done with this loadtun.sh script as well? The old script:
#!/bin/sh
# Create the necessary file structure for /dev/net/tun
if ( [ ! -c /dev/net/tun ] ); then
if ( [ ! -d /dev/net ] ); then
mkdir -m 755 /dev/net
fi
mknod /dev/net/tun c 10 200
fi
# Load the tun module if not already loaded
if ( !(lsmod | grep -q "^tun\s") ); then
insmod /lib/modules/tun.ko
fi
# Load iptables mangle is not already loaded
if ( !(lsmod |grep -q "^iptable_mangle\s") ); then
insmod /lib/modules/iptable_mangle.ko
fi