WHAT IS IT?
wg-easy is a web UI that installs and manages a WireGuard server on any Linux host. You deploy a single Docker container, open the UI, and create or revoke VPN clients without ever hand-editing a config file. It's the admin layer WireGuard lacks when you don't want to juggle wg and .conf files on the command line.
WHY IS IT INTERESTING?
- QR-code client onboarding: every client gets its own QR code and downloadable config file, so pairing a phone takes about ten seconds.
- Full management from the UI: create, edit, disable or delete a client, with expiration and one-time links to share a temporary config.
- Real-time stats: per-client Tx/Rx charts and connection status, without pulling in a separate monitoring tool.
- 2FA and hardening: two-factor auth on the UI, per-client firewall filtering, IPv6 and CIDR support.
- Docker/Podman deploy: a single
docker compose upand you're live. Prometheus metrics are exposed if you want to wire it into your observability stack.
USE CASES
- Remote access to a homelab or private network without exposing services directly
- Self-hosted team VPN for a small org, no third-party service involved
- Secure tunnel to a cloud server for administration
- Granting temporary access to a contractor through an expiring one-time link