diff --git a/bin/install b/bin/install
new file mode 100644
index 0000000..d761b2d
--- /dev/null
+++ b/bin/install
@@ -0,0 +1,51 @@
+#!/bin/bash
+
+# wgas user_data install script (Ubuntu 18.04)
+
+APP_REPO=https://github.com/lalanza808/wgas
+APP_USER=wgas
+APP_SVC=wgas
+APP_HOME=/opt/wgas
+SYSTEMD_PATH=/lib/systemd/system/wgas.service
+
+# Update package metadata and install base dependencies
+apt-get update
+apt-get install -y git sudo gettext
+
+# Install WireGuard
+apt-get install -y software-properties-common
+add-apt-repository -y ppa:wireguard/wireguard
+apt-get update
+apt-get install -y "linux-headers-$(uname -r)"
+apt-get install -y wireguard iptables resolvconf
+
+# Install Rust dependencies
+apt-get install -y build-essential
+
+# Create app user and directory
+useradd $APP_USER -s /sbin/nologin -M
+mkdir -p $APP_HOME
+chown -R ubuntu:ubuntu $APP_HOME
+
+# Install Rust and build application
+cat << EOF > /opt/install_app.sh
+#!/bin/bash
+curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | RUSTUP_HOME=~/.rustup sh -s -- -y
+source ~/.cargo/env
+git clone $APP_REPO $APP_HOME
+cd $APP_HOME
+rustup override set nightly
+cargo build --release
+EOF
+chmod +x /opt/install_app.sh
+sudo -u ubuntu /opt/install_app.sh
+
+# Add app user to sudoers file
+echo "$APP_USER ALL=(ALL) NOPASSWD: $(which wg), $(which wg-quick)" >> /etc/sudoers
+
+# Setup systemd service
+cat $APP_HOME/util/wgas.service | envsubst > $SYSTEMD_PATH
+chmod 755 $SYSTEMD_PATH
+systemctl daemon-reload
+systemctl enable wgas-rs
+systemctl start wgas-rs
diff --git a/bin/wg_cmd b/bin/wg_cmd
new file mode 100644
index 0000000..ccdfc95
--- /dev/null
+++ b/bin/wg_cmd
@@ -0,0 +1,3 @@
+#!/bin/bash
+
+sudo wg "$@"
diff --git a/bin/wg_install b/bin/wg_install
deleted file mode 100644
index 9293c61..0000000
--- a/bin/wg_install
+++ /dev/null
@@ -1,8 +0,0 @@
-#!/bin/sh
-
-# Install WireGuard
-apt-get install -y software-properties-common
-add-apt-repository -y ppa:wireguard/wireguard
-apt-get update
-apt-get install -y "linux-headers-$(uname -r)"
-apt-get install -y wireguard iptables
diff --git a/util/wgas.service b/util/wgas.service
new file mode 100644
index 0000000..d77aaf7
--- /dev/null
+++ b/util/wgas.service
@@ -0,0 +1,29 @@
+[Unit]
+Description=WireGuard Access Server Service - $APP_REPO
+ConditionPathExists=$APP_HOME/target/release/wgas
+After=network.target
+
+[Service]
+Type=simple
+User=$APP_USER
+Group=$APP_USER
+LimitNOFILE=1024
+
+Restart=on-failure
+RestartSec=10
+startLimitIntervalSec=60
+
+WorkingDirectory=$APP_HOME
+ExecStart=$APP_HOME/target/release/wgas
+
+# make sure log directory exists and owned by syslog
+PermissionsStartOnly=true
+ExecStartPre=/bin/mkdir -p /var/log/$APP_SVC
+ExecStartPre=/bin/chown syslog:adm /var/log/$APP_SVC
+ExecStartPre=/bin/chmod 755 /var/log/$APP_SVC
+StandardOutput=syslog
+StandardError=syslog
+SyslogIdentifier=$APP_SVC
+
+[Install]
+WantedBy=multi-user.target