Wg Admin

A focused web UI for a WireGuard host that is already running. It reads the files already in /etc/wireguard , lets you add and edit peers, and applies changes with wg syncconf so the interface does not bounce.

Most WireGuard admin panels want to own the tunnel: they generate a new config, take over wg-quick , and leave you to re-learn their layout. This one does the opposite.

Install it on a host that already has a working VPN. Existing [Interface] keys, routing hooks, and peers stay as they are. You get a password-protected UI for day-to-day peer work — names, client files, QR codes, handshakes — without replacing the server setup you already trust.

Inherits live configs — every *.conf in /etc/wireguard is listed and managed in place

Client onboarding — downloadable .conf and QR code for peers created or rotated in the UI

Local by default — binds to 127.0.0.1 ; put Caddy or nginx with TLS in front if others need access

Then open http://127.0.0.1:8080 and set an admin password. Every *.conf already in /etc/wireguard is listed and managed in place.

Keep the service on localhost. Put a reverse proxy with TLS in front if anyone else needs access.

WireGuard never stores a client private key on the server. Peers that already existed can be edited and removed, but a downloadable .conf / QR code is only available for peers created (or rotated) in this UI.