WireGuard Portal
Control WireGuard VPN interfaces through a self-hosted web portal. Authenticate users via LDAP or OAuth, generate QR codes, and automate IP assignments.
Deploy a self-hosted, web-based configuration portal to manage WireGuard VPN interfaces. Administrators can activate or deactivate users without disrupting existing VPN connections. It integrates easily with existing infrastructure, offering authentication via databases, OAuth, or LDAP. Key benefits include Automated IP Assignment from designated network pools, and Easy Client Configuration via QR codes and email delivery. It offers Broad Compatibility by working with existing WireGuard setups and supporting backends like wgctrl, MikroTik, and pfSense. For Advanced Management, it includes peer expiry features, REST API access, and webhooks for custom actions. It is also Monitoring Ready, exposing Prometheus metrics for straightforward alerting. Available as a single binary or Docker container, it provides a responsive, multi-language UI with dark mode support.
Directory Structure
docker-compose.yml
services:
wg-portal:
image: wgportal/wg-portal:v2
container_name: wg-portal
restart: unless-stopped
logging:
options:
max-size: "10m"
max-file: "3"
cap_add:
- NET_ADMIN
# Use host network mode for WireGuard and the UI. Ensure that access to the UI is properly secured.
network_mode: "host"
volumes:
# left side is the host path, right side is the container path
- /etc/wireguard:/etc/wireguard
- ./data:/app/data
- ./config:/app/config
Similar to WireGuard Portal