WireGuard on a router or in an app: getting the config
The main way to connect to GnomeVPN is the subscription link in INCY. A router or a WireGuard app cannot read a link, though: it needs a .conf file. You can get one in your account or from the Telegram bot. Here is where the config comes from, where to load it and what its limits are.
When WireGuard is the right call
WireGuard is not part of the subscription, and that is deliberate. The protocol is simple and fast, but easy to recognise, and on mobile networks it often will not connect. So we hand it out as a separate config for two cases: a router that should carry the whole home network, and an app that speaks nothing but WireGuard. For a phone or a computer INCY is the easier choice: one link carries every country, Hysteria2 and VLESS, and Russian sites go direct. If a config will not connect, try INCY — how the protocols differ is in the post on Hysteria2 and VLESS.
Where to get the config
In your account open the Connect tab and choose With a config. Pick a country, name the device — Router, say — and press Create. The config can be downloaded as a .conf file or opened as a QR code to scan with a phone. The /wireguard command in the Telegram bot does the same and sends the file straight to the chat. Configs are available while a subscription or a free day is active. A server that is not answering right now cannot be picked in the form, and its state is shown on the server status page.
A router
Keenetic, OpenWrt and MikroTik can all act as a WireGuard client. In the router's web interface find the WireGuard connections section and upload the .conf file — or copy its fields over by hand: the keys, the address, the server and the port. Once it is on, every device on the home network goes through the VPN, the TV and the set-top box included, and the router takes a single place in your subscription limit. Keep in mind that the config sends all traffic through the tunnel, Russian sites included: the “Russian sites — direct” switch applies in INCY only.
Apps
On Windows WireSock Secure Connect works best: it imports the .conf and can send only chosen programs through the VPN. On iPhone and Android, AmneziaVPN: the config goes in as a file or by scanning the QR code, and the app has its own per-site split tunnelling. On macOS, Linux and anywhere the first two do not run, the official WireGuard app; on Linux it is enough to put the file in /etc/wireguard and run wg-quick up with the config name. The file name becomes the tunnel name, which is why we keep it within the 15 characters Windows and Linux allow. Links to the apps are on the setup page.
Limits
One config is one device and one country. To change country, create another config and delete the old one: each takes a place in your device limit. Do not load one config onto several devices — it is made for one. A deleted config stops working within a few minutes and cannot be restored, and its place is freed. Rotating the subscription link does not touch configs. When the subscription ends, configs are switched off and come back with the renewal; if the extra device places you bought run out, the configs past the limit are deleted. The rest is in the FAQ.