Migrate existing Wireguard road warrior setup to OpnSense?

[EricE]

I have an existing Wireguard road warrior setup on a raspberry pi, but now that I have upgraded my OpnSense hardware to something more robust I should easily be able to consolidate everything onto OpnSense.  I've looked over the documentation and the configuration forms in the GUI, but there doesn't seem to be an easy (or at least obvious) way to transfer over the configuration of an existing Wireguard into OpnSense?  It appears to insist on auto generating all the keys and there doesn't appear to be a way to change them later?

I suppose I could configure a road warrior Wireguard, save a firewall backup file then edit it with all my existing keys and finally restore that backup - that would probably work but am I missing something that might be easier? 

It feels like with the editing backup path I could easily miss something significant that would make troubleshooting really fun either immediately or even better (ha!) much later. 

[Greelan]

If you re-edit the local config after it auto-generates keys the first time, then you can easily replace the keys

If you are looking for a solution to upload multiple configs at once rather than creating them manually, I recall a few weeks ago a topic here on that, and using the API for it

[EricE]

Aha - so the config *is* in there somewhere, eh?  I have seen everything but the path to where they are - can you give met the path?

Is it saved as part of the firewall backup/restore through the GUI or is it something I need to track separately?

Thanks!

[Greelan]

See https://forum.opnsense.org/index.php?topic=21930.0

Also docs on the WG API here: https://docs.opnsense.org/development/api/plugins/wireguard.html

[Greelan]

But you can also easily edit keys in the GUI AFAIK

[EricE]

But you can also easily edit keys in the GUI AFAIK

D'oh!  Of course - let it do the initial set up, then just edit to match my existing configuration.  How dumb of me - making it harder than it was.  Thanks for pointing out the obvious :)