phirecc / wgnord

A NordVPN Wireguard ("NordLynx") client in POSIX shell

wgnord

This script lets you connect to NordVPN servers through WireGuard using their "NordLynx" protocol.

Usage: wgnord [ l(ogin) | c(onnect) | d(isconnect) | a(ccount) ]

login:
    wgnord l "your_token"
    You can generate a (permament) token in the NordVPN dashboard
connect:
    wgnord c france
    -f            Refresh cached longitude/latitude
    -n            Don't connect
    -o out.conf   Write config to different file
disconnect:
    wgnord d
account:
    wgnord a
    Prints information about the currently logged in account

wgnord's files are in /var/lib/wgnord, edit template.conf to change Wireguard options

Installation

Dependencies:

• jq
• curl
• wg-quick (wireguard-tools)
• openresolv (for dns)

To install them on Arch:

sudo pacman -S --needed jq curl wireguard-tools openresolv

Manual installation:

git clone https://github.com/phirecc/wgnord
cd wgnord
install -Dm644 template.conf /var/lib/wgnord/template.conf
install -Dm644 countries.txt /var/lib/wgnord/countries.txt
install -Dm644 countries_iso31662.txt /var/lib/wgnord/countries_iso31662.txt
sudo install -Dm755 wgnord /usr/bin/wgnord

wgnord can also be installed through the AUR like so:

paru -S wgnord

Usage

Login (you only need to do this once):

sudo wgnord l "your_token"

You can generate a (permament) token in the NordVPN dashboard under Access token > Generate new token

Now you can connect to a server:

sudo wgnord c France

Note: country names are case-insensitive and grepped for, so sudo wgnord c fra would work aswell. See countries.txt for a list of available countries.

To disconnect:

sudo wgnord d

If you want to change WireGuard config parameters (MTU, DNS, etc.), simply modify /var/lib/wgnord/template.conf.

Extra

This script includes a "kill-switch" because of the way wg-quick works. Connections will typically stay alive for multiple days, but if it dies you can reconnect by running another connect command.

Note

This third-party project is in no way affiliated with NordVPN.

wgnord's Issues

Server connections impossible

Hi,

as of today, I can no longer connect to an NordVpn server.

Finding best server...
jq: parse error: Invalid numeric literal at line 1, column 20
jq: parse error: Invalid numeric literal at line 1, column 20
jq: parse error: Invalid numeric literal at line 1, column 20
jq: parse error: Invalid numeric literal at line 1, column 20
Connecting to  ()...
[#] ip link add wgnord type wireguard
[#] wg setconf wgnord /dev/fd/63
Line unrecognized: `PublicKey='
Configuration parsing error
[#] ip link delete dev wgnord

Regards.

/run/current-system/sw/bin/wgnord: line 16: /var/lib/wgnord/credentials.json: No such file or directory jq: error: Could not open file /var/lib/wgnord/credentials.json: No such file or directory

sudo wgnord l e9*****
/run/current-system/sw/bin/wgnord: line 16: /var/lib/wgnord/credentials.json: No such file or directory
jq: error: Could not open file /var/lib/wgnord/credentials.json: No such file or directory

Running on NixOS

Thank you for your time!

add a license

currently, despite this code being publicly available, it is still "all rights reserved", and thus not able to be linked against or built upon. I am assuming this was an oversight, would you mind picking a license?

Support: Manually enable ipv6

I would imagine I need to specify an address, and search domain for enabling ipv6 via NordVPN, is that correct? If so what should they be set to to get ipv6 working? If not what is the correct process?

[request] Choosing a specific server.

Hi,

@phirecc: Do you think it's possible to choose a specific server?
For example, with the command sudo wgnord c de953.

It's possible with the official app.

Regards.

New Countries

Hi,

@phirecc: could you add the countries of the new servers?

Regards.