VPN Wireguard Automation (No location access)

1. Automate Community
2. Security

Credit to Yassin Nacif (nassh) for the original workflow.

This version works without requiring location permission.

To set up:

Go to your WireGuard app → Settings → enable "Allow remote control apps"

Go to Automate → Settings → Privileges and enable "Edit WireGuard tunnels"

Edit the following blocks in this flow:

3.1 Block IDs 8, 9, 58, and 59
Open each block and find Extras. You will see:
{"tunnel": "your_tunnel_name"}
Replace your_tunnel_name with the exact name of your tunnel as shown in the WireGuard app.
Example: {"tunnel": "Wireguard"}

3.2 Block ID 72 (Variable set block)
Variable name: homeSubnet
Set the value to your home subnet using quotes, including a trailing period and space.
Example: "192.168.0. "
Only change the numbers.
Examples:
"192.168.1. "
"10.0.0. "
"172.16.1. "

Note: If a wireless network outside your home uses the same subnet, the VPN will turn off because the automation will think you are on your home network. To prevent this, consider changing your home router to use a less common subnet (for example 192.168.50. or 10.13.37.) and update this value accordingly.

3.3 Block ID 85 (Expression true block)
Set the expression to match your subnet's first three octets:
wifiIp != null && wifiIp =~ "^192\\.168\\.0\\."
Only change the numbers to match Block 72.
Examples:
wifiIp != null && wifiIp =~ "^192\\.168\\.1\\."
wifiIp != null && wifiIp =~ "^10\\.0\\.0\\."
Do not remove the double backslashes.

Start the flow.

Result:
When connected to your home network, the WireGuard tunnel will be disabled.
When disconnected from your home network, the WireGuard tunnel will be enabled.

Location permission is not required.