استضف خادماً خلف CGNAT. وامنحه عنوان IP عاماً حقيقياً.

sudo apt install wireguard
wg genkey | tee private.key | wg pubkey > public.key

[Interface]
Address    = 10.66.0.1/24
ListenPort = 51820
PrivateKey = <VPS_PRIVATE_KEY>
# forward the game port to your home server (one PREROUTING line per port/protocol)
PostUp   = sysctl -w net.ipv4.ip_forward=1
PostUp   = iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 25565 -j DNAT --to-destination 10.66.0.2
PostUp   = iptables -t nat -A POSTROUTING -o wg0 -j MASQUERADE
PostUp   = iptables -I FORWARD -i eth0 -o wg0 -j ACCEPT
PostUp   = iptables -I FORWARD -i wg0 -o eth0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
PostDown = iptables -t nat -D PREROUTING -i eth0 -p tcp --dport 25565 -j DNAT --to-destination 10.66.0.2
PostDown = iptables -t nat -D POSTROUTING -o wg0 -j MASQUERADE
PostDown = iptables -D FORWARD -i eth0 -o wg0 -j ACCEPT
PostDown = iptables -D FORWARD -i wg0 -o eth0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT

[Peer]
PublicKey  = <HOME_PUBLIC_KEY>
AllowedIPs = 10.66.0.2/32

[Interface]
Address    = 10.66.0.2/24
PrivateKey = <HOME_PRIVATE_KEY>

[Peer]
PublicKey           = <VPS_PUBLIC_KEY>
Endpoint            = <VPS_PUBLIC_IP>:51820
AllowedIPs          = 10.66.0.1/32
PersistentKeepalive = 25

# on the VPS
sudo ufw allow 51820/udp
sudo systemctl enable --now wg-quick@wg0

# on your home server
sudo systemctl enable --now wg-quick@wg0

# frps.toml (on the VPS)
bindPort   = 7000
auth.token = "change-me-to-a-long-random-string"

sudo ufw allow 7000/tcp
sudo ufw allow 25565/tcp
./frps -c frps.toml

# frpc.toml (at home)
serverAddr = "<VPS_PUBLIC_IP>"
serverPort = 7000
auth.token = "change-me-to-a-long-random-string"

[[proxies]]
name       = "minecraft"
type       = "tcp"
localIP    = "127.0.0.1"
localPort  = 25565
remotePort = 25565