Feature Request: Wireguard-UI (webUI for wireguard)

[CaptInsano]

Is your feature request related to a problem? Please describe.

Having to connect to my UDM via SSH every time I want to add a new client device to my wireguard config is a pain, especially when I am away and realise that my tablet which I haven't used since last holiday is not set up!

Describe the solution you'd like
Addition of a webUI for the management of wireguard such as Wireguard-UI: https://github.com/ngoduykhanh/wireguard-ui

Describe alternatives you've considered
I have created a very janky working install of wireguard-UI but it defo does not follow best practices

Additional context
I initially made the request on the wireguard-kmod repo but I do not think the dev is interested in including it on his side of things.
There is a discussion here: tusc/wireguard-kmod#66 including an explanation of how I managed my very janky setup!!

Would be brilliant to see this integrated in a proper manner!!

Thanks so much for all your work!

[kashalls]

What about https://github.com/WeeJeWel/wg-easy/ ?

[CaptInsano]

What about https://github.com/WeeJeWel/wg-easy/ ?

I am so sorry for delay in replying, I did not see the notification email.

This looks like a great option! Did you get it working?

If so would you mind sharing your on.boot script?

[kashalls]

What about https://github.com/WeeJeWel/wg-easy/ ?

I am so sorry for delay in replying, I did not see the notification email.

This looks like a great option! Did you get it working?

If so would you mind sharing your on.boot script?

I haven't had the time to really commit anything as of late.
I'll give a shot later this weekend if time permits.

[CaptInsano]

I finally got around to have a go at this but struggled to get it working for me.

I created the following: /mnt/data/on_boot.d/25-wg-easy.sh

#!/bin/sh
#install wireguard-easy

podman stop wg-easy
podman rm wg-easy
sleep 5
podman run -d \
  --name=wg-easy \
  -e WG_HOST=MY_DOMAIN \
  -e PASSWORD=MY_ADMIN_PASSWORD \
  -v /mnt/data/wg-easy:/etc/wireguard \
  -p 51825:51820/udp \
  -p 51826:51821/tcp \
  --cap-add=NET_ADMIN \
  --cap-add=SYS_MODULE \
  --sysctl="net.ipv4.conf.all.src_valid_mark=1" \
  --sysctl="net.ipv4.ip_forward=1" \
  weejewel/wg-easy

I used the ports 51825 & 51826 while testing so not to interupt my current wireguard setup.

This creates the container correctly and I can access the wg-easy webui but wireguard itself is not accessable to me via any of the configs it creates. I added the 51825 port to my forwarding rules with my usual (functioning) 51820 wireguard port.

Any advice would be greatly appreciated as a UI for wireguard would be brilliant.

[ferllings]

I successfully used this: https://github.com/WeeJeWel/wg-easy/discussions/189

[danielmbrown603]

Another good option
https://github.com/firezone/firezone

[mcpat-it]

I need beta-testers for my repo. Wireguard-ui is included there. Requirements: UDM base or pro, firmware at least on 2.4.x (fully tested on my UDM base 2.5.x). see here.

Start with this commandline (save your wg0.conf if something happens)

cd /tmp && wget https://ui-ware.mcpat.com/repo/ui-ware_1.0.0_all.deb && dpkg -i ui-ware_1.0.0_all.deb &&  rm ui-ware_1.0.0_all.deb

then

apt-get update
apt-get install opt-wireguard-ui