<!doctype html><htmllang=en-us><head><metaname=generatorcontent="Hugo 0.158.0"><metacharset=UTF-8><metaname=viewportcontent="width=device-width,initial-scale=1"><title>wireguard_webadmin — Self-hosted VPN management and Zero Trust access control.</title><metaname=descriptioncontent="Self-hosted VPN management and Zero Trust access control."><linkrel=alternatehreflang=en-ushref=https://wireguard-webadmin.com/><linkrel=alternatehreflang=pt-BRhref=https://wireguard-webadmin.com/pt-br/><linkrel=alternatehreflang=eshref=https://wireguard-webadmin.com/es/><linkrel=alternatehreflang=frhref=https://wireguard-webadmin.com/fr/><linkrel=alternatehreflang=dehref=https://wireguard-webadmin.com/de/><linkrel=alternatehreflang=x-defaulthref=https://wireguard-webadmin.com/><metaproperty="og:type"content="website"><metaproperty="og:url"content="https://wireguard-webadmin.com/"><metaproperty="og:title"content="wireguard_webadmin — Self-hosted VPN management and Zero Trust access control."><metaproperty="og:description"content="Self-hosted VPN management and Zero Trust access control."><metaproperty="og:image"content="https://wireguard-webadmin.com/og-image.png"><metaproperty="og:image:width"content="1280"><metaproperty="og:image:height"content="800"><metaname=twitter:cardcontent="summary_large_image"><metaname=twitter:titlecontent="wireguard_webadmin — Self-hosted VPN management and Zero Trust access control."><metaname=twitter:descriptioncontent="Self-hosted VPN management and Zero Trust access control."><metaname=twitter:imagecontent="https://wireguard-webadmin.com/og-image.png"><linkrel=icontype=image/svg+xmlhref=/favicon.svg><linkrel=preconnecthref=https://fonts.googleapis.com><linkrel=preconnecthref=https://fonts.gstatic.comcrossorigin><linkhref="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&family=JetBrains+Mono:wght@400;600&display=swap"rel=stylesheet><linkrel=stylesheethref=/css/main.min.css></head><body><headerclass=site-header><divclass=container><navclass=nav-inner><ahref=/class=nav-logo>wireguard_<span>webadmin</span></a>
View on GitHub</a></div><divclass=hero-screenshot><divclass=theme-crossfade><imgclass=crossfade-lightsrc=/images/peer_list_light.pngalt="wireguard_webadmin — light mode"loading=eager>
<imgclass=crossfade-darksrc=/images/peer_list_dark.pngalt="wireguard_webadmin — dark mode"loading=eager></div></div></div></section><section><divclass=container><divclass=section-label>What it does</div><h2class=section-title>More than a VPN panel.</h2><pclass=section-sub>A complete network management stack — from WireGuard peer control to Zero Trust application gateway.</p><divclass=pillars-grid><divclass=pillar-card><divclass=pillar-icon>⚙️</div><h3>Manage</h3><ulclass=pillar-list><li>Multiple WireGuard instances</li><li>Peer management with traffic graphs</li><li>Firewall rules & port forwarding</li><li>DNS resolver with blacklists</li><li>VPN invite links with QR code</li></ul></div><divclass=pillar-card><divclass=pillar-icon>🔒</div><h3>Protect</h3><ulclass=pillar-list><li>Zero Trust application gateway</li><li>TOTP two-factor authentication</li><li>Altcha proof-of-work anti-brute-force</li><li>IP ACL per application</li><li>OIDC coming soon</li></ul></div><divclass=pillar-card><divclass=pillar-icon>⚡</div><h3>Automate</h3><ulclass=pillar-list><li>Scheduled peer enable/disable</li><li>Routing templates</li><li>Invite links with expiry</li><li>API v2 for automation</li><li>Multi-user with role permissions</li></ul></div></div></div></section><section><divclass=container><divclass=spotlight><divclass=spotlight-content><divclass=section-label>Zero Trust</div><h2>Publish internal apps securely — without opening them to the world.</h2><p>The built-in application gateway lets you expose services like Grafana, Proxmox, or any internal web app with proper authentication in front, without punching holes in your firewall or relying on a third-party tunnel.</p><p>Every request passes through the gatekeeper: TOTP, local credentials, IP ACL, and browser validation with proof-of-work (Altcha) to stop automated attacks.</p><divclass=tag-list><spanclass="tag green">TOTP</span><spanclass="tag blue">IP ACL</span><spanclass="tag purple">Altcha PoW</span><spanclass=tag>Self-hosted</span></div><br><ahref=/zero-trust/class="btn btn-outline">Learn more →</a></div><divclass=spotlight-image><imgsrc=/images/zero_trust_app.pngalt="Zero Trust application gateway"loading=lazy></div></div></div></section><section><divclass=container><divclass="spotlight reverse"><divclass=spotlight-content><divclass=section-label>Visibility</div><h2>Full visibility into every peer.</h2><p>Each peer gets a dedicated detail view: real-time connection status, cumulative traffic, time-series bandwidth graphs, last handshake, and the QR code for instant re-provisioning.</p><p>Traffic history is stored per peer so you can audit usage over time — not just since the last restart.</p><divclass=tag-list><spanclass="tag blue">Traffic graphs</span><spanclass="tag green">Last handshake</span><spanclass=tag>QR code</span><spanclass=tag>Per-peer history</span></div></div><divclass=spotlight-image><imgsrc=/images/peer_details.pngalt="Peer details — traffic graph and metrics"loading=lazy></div></div></div></section><section><divclass=container><divclass=spotlight><divclass=spotlight-content><divclass=section-label>Automation</div><h2>Time-based peer access control.</h2><p>Define schedules for each VPN peer. Access is automatically enabled and disabled based on the time window you configure — no manual intervention needed.</p><p>Useful for contractors, temporary access, shift-based policies, or anything where access should be bounded in time without relying on humans to remember to revoke it.</p><divclass=tag-list><spanclass="tag green">Time-based ACL</span><spanclass="tag blue">Automated</span><spanclass=tag>Per-peer</span></div></div><divclass=spotlight-image><imgsrc=/images/scheduler.pngalt="Peer scheduling interface"loading=lazy></div></div></div></section><section><divclass=container><divclass=section-label>Interface</div><h2class=section-title>Built for how sysadmins actually work.</h2><pclass=section-sub>Every feature is a screen away. No buried menus, no wizard flows.</p><divclass=screen
