
wg-easy
WireGuard VPN server with a web-based admin interface
26.8k stars 2.6k forks last commit first released AGPL-3.0
Actively maintained
Last commit 25 Aug 2026.

wg-easy is an all-in-one WireGuard VPN solution that bundles a WireGuard server with a web-based admin interface. It simplifies provisioning and managing VPN clients while providing visibility into connected peers and traffic.
Key Features
- All-in-one deployment: WireGuard plus web admin UI
- Create, edit, enable/disable, and delete VPN clients
- Generate and display client QR codes and download configuration files
- Connection status and per-client traffic statistics with Tx/Rx charts
- One-time links and client expiration support
- Prometheus metrics support
- IPv6 and CIDR support
- Optional 2FA support
- Light/dark mode and multilingual UI
Use Cases
- Managing a home lab or small team VPN without manual config editing
- Quickly onboarding devices via QR code configuration
- Monitoring VPN usage and traffic per client with basic metrics
wg-easy is well-suited for users who want a straightforward way to deploy WireGuard and handle day-to-day client administration through a browser. It combines simple operations with useful visibility features while keeping WireGuard management approachable.
Categories:
Tags:
Tech Stack:
Similar to wg-easy

WGDashboard
Web dashboard to manage and monitor WireGuard VPN
Self-hosted web dashboard for WireGuard and AmneziaWG to manage configs, peers, and access with a simple UI and optional 2FA.

ZTNET
Web UI for managing private ZeroTier controllers with teams
ZTNET is a self-hosted web UI for administering private ZeroTier controllers, with multi-user access, organization support, and streamlined network and member management.

Wiredoor
Ingress-as-a-service to expose private services via WireGuard and NGINX
Self-hosted ingress platform that exposes internal HTTP/TCP services to the internet through reverse WireGuard tunnels, with NGINX routing and automatic TLS certificates.

Pangolin
Identity-aware VPN and reverse proxy for secure remote access
Open-source identity-based remote access platform combining WireGuard VPN and tunneled reverse proxy access with granular zero-trust controls.

Firezone
Zero-trust remote access platform built on WireGuard
Firezone is a zero-trust VPN replacement built on WireGuard, providing identity-aware access policies, peer-to-peer encrypted tunnels, and lightweight gateways.

WatchYourLAN
Lightweight LAN IP scanner with web UI, alerts, and metrics export
Self-hosted lightweight LAN IP/ARP scanner with web dashboard, new-host notifications, online/offline history, and metrics export to Prometheus or InfluxDB for Grafana.



