wg-easy/wg-easy

wg-easy is a web-based administration interface for WireGuard VPN that runs on Linux hosts, typically deployed via Docker.

The tool solves the problem of managing WireGuard VPN configurations through a graphical interface rather than command-line configuration files. It bundles WireGuard with a web UI that handles client lifecycle management—creating, editing, deleting, enabling, and disabling VPN clients. The interface displays connection statistics, transmission and reception charts per client, and generates QR codes and configuration files for client onboarding.

The project suits operators who want to deploy a self-hosted VPN without managing WireGuard configuration manually. It works well for small to medium deployments where a web interface reduces operational friction. The tool supports Docker and Podman deployment, integrates with reverse proxies like Caddy and Traefik, and includes advanced features such as OIDC authentication, two-factor authentication, client expiration, per-client firewall rules, and Prometheus metrics. The README does not position this against alternative WireGuard management tools, so no comparison is made.

Development activity shows consistent engagement with both maintenance and feature expansion. The project maintains detailed documentation on a dedicated site covering installation, configuration, and migration paths. The codebase is written in TypeScript and includes a development environment configured for Docker-based local testing. The team accepts sponsorships and has defined clear prerequisites and development workflows for contributors.