pajus @published 2026-09-30 · 13 min read WireGuard VPN on Debian 13 with nftables Set up a locked-down WireGuard VPN on Debian 13: wg-quick, PresharedKey, default-drop nftables NAT, split tunnel, leak tests and handshake troubleshooting. Tags Debian Firewall Linux Security Server Hardening VPN