WireGuard Easy: Open Source alternative to NordVPN Teams in 2026
WireGuard Easy puts a web panel on top of a full WireGuard server so you can create and manage VPN clients with QR codes in minutes, no command line needed, as a free alternative to a commercial team VPN.
Audit Snapshot
View notes →License — Matches GitHub
GitHub — Active
Latest release — v15.4.0 · 2 months ago
Docker Compose — Partial
Production — Not production-tested by AltFreeStack
WireGuard Easy vs. NordVPN Teams
Pros
- Sets up a full WireGuard server in minutes
- Much simpler interface than configuring WireGuard by hand
Things to consider
- Built for a single VPN server, not a multi-node mesh network like Headscale
- Requires opening a UDP port on your firewall/router
Quick Docker installation guide
Copy this docker-compose.yml, adjust the example passwords and run docker compose up -d on your server. See the full step-by-step guide →
💡 Official SaaS or self-hosted with AltFreeStack?
- On the official cloud: a recurring monthly fee and usage limits on NordVPN Teams.
- On your own VPS: 100% free software on your own server, with no artificial row, project or user limits.
services:
wg-easy:
image: ghcr.io/wg-easy/wg-easy:15.4.0
restart: unless-stopped
environment:
WG_HOST: vpn.yourdomain.com # CHANGE THIS TO YOUR DOMAIN
PASSWORD_HASH: change-me-bcrypt-password-hash # REQUIRED: generate a random secret before first run
volumes:
- wg_easy_data:/etc/wireguard
ports:
- "51820:51820/udp"
- "51821:51821/tcp"
cap_add:
- NET_ADMIN
- SYS_MODULE
sysctls:
- net.ipv4.ip_forward=1
- net.ipv4.conf.all.src_valid_mark=1
volumes:
wg_easy_data:
🚀 Deploy in 1 command
Recommended for beginnersCopy this single command and paste it into your freshly created VPS's console (Vultr, DigitalOcean...). It downloads the script, prints it to your screen so you can see exactly what it's about to do (never a blind direct pipe), and only then installs Docker if needed, writes the files with secrets already generated, and starts everything — no nano, no pasting code blocks.
curl -sSL ".../api/deploy?stack=wireguard-easy" -o deploy.sh && cat deploy.sh && bash deploy.shThis docker-compose corresponds to an actively maintained project — last commit today.
This docker-compose not working for you? Report it on GitHub →Technical profile
- License
- AGPL-3.0
- Category
- Auth & Identity
- Replaces
- NordVPN Teams, OpenVPN Access Server
- Tech stack
- Node.jsWireGuard
Under the hood
Database
None / File-based
Language
Node.js / Vue.js
Platforms
Web
Key features
- Web panel to create and manage WireGuard clients with QR codes
- Real-time traffic stats per device
- A single container, no external database
Preview
Public image provided by WireGuard Easy on its own website.
💾 Backups in 3 steps (Day 2)
As long as the ./data folder (the "volume" mapped into the container) exists on your server, your data survives any restart or container update — that's the only thing you need to back up.
1. Create a compressed backup on the server
tar -czvf backup-$(date +%F).tar.gz ./data2. Download it to your computer
From your computer's terminal (not your server's):
scp root@YOUR_IP:~/app/backup-*.tar.gz ./3. Restore in case of emergency
tar -xzvf backup-file.tar.gz🌐 Connect your domain with free SSL
Step 1 — Set up the DNS
In your domain registrar's dashboard (Cloudflare, Namecheap, GoDaddy...), create a record:
- Type
- A
- Name/Host
- @ (root domain) or a subdomain, e.g. app
- Content/Value
- Your server's public IP
Wait 5 to 15 minutes for the record to propagate across the internet.
Step 2 — Automatic reverse proxy with Caddy
One single file, no Nginx config or manual certificates — Caddy issues and renews Let's Encrypt HTTPS on its own.
Create a file called Caddyfile:
yourdomain.com {
reverse_proxy localhost:51820
}Start Caddy with this command (pulls the image and runs it in the background):
docker run -d -p 80:80 -p 443:443 --name caddy --restart always -v $PWD/Caddyfile:/etc/caddy/Caddyfile -v caddy_data:/data caddy