roof/pic
1
0
Fork 0
Code Issues Pull Requests Actions Wiki Activity
Page: User – Connect to the VPN
Pages
ADR – 001 Store Images Are Signed and Verified by Cells ADR – 002 Named Connection Instances for Connectivity ADR – 003 All Optional Functionality Ships as Store Services Admin – Back Up and Restore Admin – Configure Connectivity Admin – Configure Domains and TLS Admin – Install and First Run Admin – Logging and Audit Admin – Manage Peers Admin – Manage Services Admin – Monitor and Troubleshoot Admin – Overview Archive – ADR 004 The Wiki Is the Single Documentation Source Archive – User Guide Dev – API Reference Dev – Architecture Dev – Build a Store Service Dev – Install Internals Dev – Overview Dev – Service Manifest Reference Dev – Testing Home Meta – Glossary Meta – Template ADR Meta – Template Runbook User – Connect to the VPN User – FAQ User – Start Here User – Troubleshooting User – Use Your Services
Clone
User – Connect to the VPN
Dmitrii Iurco edited this page 2026-06-11 15:39:28 -04:00
Table of Contents

Status: Active | Owner: @roof | Updated: 2026-06-11

User – Connect to the VPN

Your cell admin creates a WireGuard peer configuration for you. This page explains how to get it and use it.

Step 1 — Get your configuration from the admin

Ask your admin to add you as a peer. They will give you either:

  • A QR code — easiest on a phone
  • A configuration file (.conf) — easiest on a desktop or laptop

The admin generates these from the Peers page in the cell dashboard. The configuration contains a private key that was generated specifically for you. Treat it like a password.

Step 2 — Install the WireGuard app

Install the WireGuard client for your device:

  • Android / iOS — install the WireGuard app from the Play Store or App Store
  • macOS — install WireGuard from the Mac App Store
  • Windows — download the installer from wireguard.com
  • Linux — install the wireguard-tools package for your distribution

Step 3 — Import the configuration

On a phone (QR code):

  1. Open the WireGuard app.
  2. Tap the + button.
  3. Choose Scan from QR code.
  4. Point your camera at the QR code your admin shows you.
  5. Give the tunnel a name (for example, My Cell).

On a desktop (config file):

  1. Open the WireGuard app.
  2. Click Import tunnel(s) from file (or Add Tunnel on Linux).
  3. Select the .conf file your admin gave you.

Step 4 — Connect

Toggle the tunnel on. After a few seconds, the status should show Active.

You should now see a green indicator in the WireGuard app showing the tunnel is active.

Verifying it works

Once connected:

  1. Open a browser and navigate to your cell's domain (your admin will tell you the address, for example https://myhome.pic.ngo). It should load over HTTPS.
  2. DNS names ending in .cell (like api.cell) should resolve from inside the VPN — these are internal names that only work when connected.

If the domain works on the VPN but not off it, that is expected — some services are only available inside the tunnel.

What is split-horizon DNS?

PIC runs a split-horizon DNS configuration:

  • Inside the VPN: your cell's domain name (for example, myhome.pic.ngo) resolves to the cell's internal WireGuard address. Traffic goes through the tunnel. This is more efficient and keeps traffic private.
  • Outside the VPN: the same domain resolves to the cell's public IP. Traffic goes over the regular internet.

You do not need to configure anything for this to work. It is automatic.

Didn't work? → User – Troubleshooting

Personal Internet Cell

Home

New here?

User – Start Here User – FAQ

Users

User – Connect to the VPN User – Use Your Services User – Troubleshooting

Admins

Admin – Overview Admin – Install and First Run Admin – Configure Domains and TLS Admin – Manage Services Admin – Configure Connectivity Admin – Manage Peers Admin – Back Up and Restore Admin – Logging and Audit Admin – Monitor and Troubleshoot

Developers

Dev – Overview Dev – Architecture Dev – Build a Store Service Dev – Service Manifest Reference Dev – API Reference Dev – Testing Dev – Install Internals

Decisions (ADRs)

ADR – 001 Store Images Are Signed and Verified by Cells ADR – 002 Named Connection Instances for Connectivity ADR – 003 All Optional Functionality Ships as Store Services

Meta

Meta – Glossary Meta – Template Runbook Meta – Template ADR

Archive

Archive – User Guide Archive – ADR 004 The Wiki Is the Single Documentation Source