WGDashboard

Open source alternative to Tailscale and Pritunl

3.8K stars
Apache-2.0
Active this week
Last commit 1 day ago

Last verified Oct 31, 2026

Manage WireGuard and AmneziaWG VPN servers through a web UI with peer management, MFA, and scheduled peer automation. Apache-2.0 licensed.

Visit website GitHub3.8K Deploy on Hostinger

Read the full breakdownWho it is for, how it works, trade-offs, the quick start and the FAQ

who it's for

Who WGDashboard is for#

Sysadmins managing team VPN access

Managing peer access for a team across a WireGuard server involves repetitive config edits and manual credential sharing. WGDashboard centralizes peer creation, access revocation, and QR-code-based onboarding in a web UI.

Skip if:

Your VPN access management is already handled by a corporate SSO system or a managed network tool that handles peer provisioning.

Homelabbers running self-hosted networks

Homelabbers who run a WireGuard server for remote access to self-hosted services can manage peers without SSHing into their home server. The QR code sharing makes adding mobile clients quick.

Skip if:

You prefer a fully automated mesh network where you do not want to manage a VPN server yourself.

Operators granting time-limited VPN access

The scheduled peer automation lets administrators give contractors or temporary team members VPN access that expires automatically after a set time or data limit, without manual cleanup.

Skip if:

Your use case requires per-application access controls or audit logging beyond peer-level records.

the problem

The problem it solves#

WireGuard is a fast, minimal VPN protocol with no native management interface. Checking peer status, adding new users, or revoking access requires SSHing into the server and running wg show or editing configuration files by hand. For teams or homelabbers managing more than a handful of peers, that workflow becomes a real pain: one misconfiguration in a config file drops all connected clients, and there is no audit log or UI to track who has access.

Adding peers manually also means generating and distributing long configuration strings or QR codes from the terminal, requiring a second tool just for onboarding. Scheduling peer expiry is not built into WireGuard, so administrators either run cron jobs by hand or leave peers active indefinitely.

how WGDashboard solves it

How it solves it#

Automatic configuration pickup

WGDashboard scans `/etc/wireguard` and `/etc/amnezia/amneziawg` on startup and imports existing configurations without manual migration. Any WireGuard or AmneziaWG config already present on the server appears in the dashboard immediately.

Peer management with auto-generated keys

Add single or multiple peers with auto-generated keypairs and configuration data. Edit peer names, allowed IPs, and DNS settings. Restrict or delete peers from the UI without touching config files directly.

TOTP multi-factor authentication

Login supports optional MFA via TOTP, compatible with most authenticator apps. The authentication check runs locally, so there is no external identity provider or paid authentication service involved.

QR code and URL peer sharing

Share a peer's full configuration as a scannable QR code, a direct URL, or by email. Mobile WireGuard clients can scan the QR code to configure the tunnel in seconds, removing the need to copy long config strings.

Scheduled peer automation

Set conditions to automatically restrict or delete a peer when a time limit or data quota is reached. The scheduler runs on the server, removing the need for manual cron jobs or periodic audits of peer access.

AmneziaWG support

Manages AmneziaWG configurations alongside standard WireGuard in the same interface. AmneziaWG is a WireGuard fork designed for resilience against deep packet inspection in restricted network environments.

strengths · trade-offs

Strengths and trade-offs#

Strengths

Apache-2.0 license, zero licensing costsThe full tool is Apache-2.0 licensed. Run it on your own server for any purpose, including commercial team use, without paying licensing fees or per-seat charges.
No migration requiredWGDashboard reads existing WireGuard and AmneziaWG configs in place. There is no data export, schema migration, or reconfiguration of running tunnels needed to adopt it.
Multiple deployment pathsRuns on bare-metal Linux across eight major distributions and on Docker. A Proxmox VE helper script is also available. Operators already running WireGuard on any of these environments can add the dashboard without changing their stack.
Actively maintainedThe repository has 3,764 stars, 483 forks, and was last pushed in October 2026. The project has been in continuous development since October 2020.

Trade-offs

-Linux-only for bare-metal deploymentBare-metal installation requires Linux. Windows and macOS are not supported as server operating systems. Teams running WireGuard on a dedicated Linux server are unaffected, but environments without a Linux server will need the Docker path.
-WireGuard prerequisiteWGDashboard manages WireGuard; it does not install or configure it. A working WireGuard or AmneziaWG setup must already exist on the server before the dashboard is useful. New WireGuard users need to configure the VPN first.
-71 open issuesThe issue tracker shows 71 open issues as of October 2026. Review the tracker before adopting if specific features or bug fixes are critical to your deployment.

versus alternatives

WGDashboard vs alternatives#

WGDashboard vs Tailscale

WGDashboard and Tailscale both provide a way to manage WireGuard-based VPN connections, but from different positions in the stack. Tailscale is a proprietary service that manages key exchange and peer discovery through its own coordination servers. WGDashboard is a self-hosted web UI that sits on top of a WireGuard server you already operate.

Feature	WGDashboard	Tailscale
License	Apache-2.0	Proprietary
Self-hosting	Yes, on Linux	Control plane is proprietary
WireGuard management	Direct config control	Managed by Tailscale

WGDashboard suits teams that already run a WireGuard server and want a graphical management layer without handing off the control plane to a third party. Tailscale is a better fit when the goal is a zero-configuration mesh network where managing VPN server infrastructure is not something the team wants to do.

WGDashboard vs Pritunl

Pritunl is a proprietary VPN management platform; both tools provide a web interface for VPN server management, but on different licensing models.

Feature	WGDashboard	Pritunl
License	Apache-2.0	Proprietary
Self-hosting	Yes	Yes

WGDashboard covers WireGuard and AmneziaWG management under an Apache-2.0 license with no commercial licensing requirements. Pritunl is worth considering when enterprise-scale VPN management features or support contracts are requirements that WGDashboard does not address.

install · quick start

Quick start#

bash

Self-hosting runs on Linux servers or Docker.
```bash
docker run -d donaldzou/wgdashboard
```

tech stack · detected from GitHub

What it's built on#

Languages: JavaScriptPython
Frameworks: FlaskVue
Databases: MySQLSQLite

frequently asked

FAQ#

Does WGDashboard replace WireGuard?

No. WGDashboard is a management interface that runs on top of WireGuard or AmneziaWG. You must install and configure WireGuard on the server first; WGDashboard reads the existing configuration and adds a web UI over it.

Can I run WGDashboard in Docker?

Yes. Docker is a supported deployment method alongside bare-metal Linux. The Docker image is donaldzou/wgdashboard, confirmed by the project's Docker Hub badge in the README.

Does WGDashboard support AmneziaWG?

Yes. WGDashboard manages both standard WireGuard configurations and AmneziaWG configurations from the same interface. AmneziaWG configs are picked up automatically from /etc/amnezia/amneziawg on the server.

Is WGDashboard free to use?

Yes. WGDashboard is Apache-2.0 licensed and free to self-host for any use, including commercial team use. There are no per-seat fees, paid tiers, or licensing restrictions on self-hosting.

What Linux distributions does WGDashboard support for bare-metal deployment?

WGDashboard supports Ubuntu, Debian, RHEL, CentOS, AlmaLinux, Fedora, Alpine Linux, Rocky Linux, and Raspberry Pi OS for bare-metal installation. Docker deployment works on any Linux host that runs Docker.

also worth a look