wg-easy delivers a self-hosted WireGuard VPN server with a full web admin UI to add peers and download client configs and QR codes, preinstalled and running behind nginx and ready to use within minutes of launch. A unique admin password is generated on first boot. Backed by 24/7 cloudimg support.
wg-easy is the easiest way to run your own WireGuard VPN server and manage it entirely from your web browser. WireGuard is a modern, fast and secure VPN protocol; wg-easy wraps it in a clean admin console where you add and remove peers, download ready-to-use client configuration files and QR codes, and see each client's connection status at a glance. This image delivers wg-easy 15.3.0 fully installed and running behind an nginx reverse proxy, with the encrypted WireGuard tunnel published on UDP 51820 and the web UI on port 80. wg-easy's database of the admin user, interface keys, peers and settings lives on a dedicated EBS data volume at /var/lib/wg-easy. On first boot a one-shot service creates the admin account with a per-instance password, completes the first-run setup with the instance's own public address, and records the credentials in a root-only file. No shared or default credentials ship in the image.