WireGuard VPN
Self-hosted WireGuard with a web UI for adding/removing peers, downloading configs, and viewing status.
What I run
- WireGuard server on Linux with a lightweight web UI
- Per-client IP allocation and allowed-IPs rules (split/full tunnel as needed)
- Backups of server keys/config; UI provides per-peer QR and .conf
- Ingress limited and monitored; certs automated
Snippets
Install base WireGuard on Rocky/EL:
dnf install -y epel-release
dnf install -y wireguard-tools
# bring interface up once config exists:
# wg-quick up wg0
Quick checks:
# show peers/handshakes quickly
wg show
# bring interface up/down
wg-quick up wg0
wg-quick down wg0
I keep management in the web UI for speed (add/remove peers, rotate keys) and automate backups of configs.