diff --git a/scripts/install.sh b/scripts/install.sh
index 213addb..1a33f0c 100755
--- a/scripts/install.sh
+++ b/scripts/install.sh
@@ -39,6 +39,11 @@ deb-src http://deb.debian.org/debian ${DIST} main
 deb http://deb.debian.org/debian-security/ ${DIST}/updates main
 deb-src http://deb.debian.org/debian-security/ ${DIST}/updates main
 
+# backports for wireguard
+# https://www.wireguard.com/install/
+# https://backports.debian.org/Instructions/
+deb http://deb.debian.org/debian buster-backports main
+
 deb http://deb.debian.org/debian ${DIST}-updates main
 deb-src http://deb.debian.org/debian ${DIST}-updates main
 EOF
@@ -73,6 +78,7 @@ base_applications() {
         htop \
         iotop \
         locales \
+        linux-headers-$(uname -r) \
         make \
         mount \
         net-tools \
@@ -86,6 +92,7 @@ base_applications() {
         vim \
         vpnc \
         vpnc-scripts \
+        wireguard \
         zip \
         --no-install-recommends
 
@@ -93,6 +100,8 @@ base_applications() {
     $SUDO apt autoremove
     $SUDO apt autoclean
     $SUDO apt clean
+
+    $SUDO ip link add dev wg0 type wireguard
 }
 
 install_server_base() {
@@ -416,7 +425,7 @@ main() {
     local cmd=$1
 
     if [[ -z "$cmd" ]]; then
-        echo "Usage: \n base | desktop | server | dotfiles | update-docker | go"
+        echo "Usage: \n base (includes docker+compose)| desktop | server | dotfiles | vscode | latex | update-docker | go"
     fi
 
     case "$cmd" in