wg-easy runs a WireGuard VPN and its web admin page in a single container. Create a client in the browser, scan its QR code or download the config file, then watch which clients are connected and how much traffic each one moves.
How wg-easy stacks up against other networking apps. Add or remove apps to change the comparison.
| Requirement | wg-easy | |
|---|---|---|
| Price | Free | Free + Paid |
| Web UI | Yes | Yes |
| Architecture | x86 + ARM | x86 + ARM |
| Min hardware | Not stated | 1 CPU · 2 GB RAM |
| Containers | 1The app alone | 3Plus Dashboard, Traefik |
| Database | SQLite | SQLite |
| Runtime | Node | Go |
| Docker | Yes | Yes |
| Linux package | – | Yes |
| iOS | – | Yes |
| Android | – | Yes |
| macOS | – | Yes |
| Windows | – | Yes |
| Linux | – | Yes |
| Full comparison | This app | NetBird vs wg-easy |
Install Docker, download the project's docker-compose.yml and run docker compose up -d. The container needs the NET_ADMIN and SYS_MODULE capabilities and publishes 51820/udp for WireGuard and 51821/tcp for the web UI.
Open UDP 51820, the WireGuard port, in your firewall. The web UI runs on 51821/tcp, and the docs suggest putting it behind a reverse proxy such as Caddy or Traefik.
Each client can be enabled, disabled, given an expiry date or shared as a one time link. wg-easy shows its QR code and config file, and lists which clients are connected with Tx and Rx charts.
More apps in Networking.
NetBird joins phones, laptops and the home server to one WireGuard network without opening a port per device. Peers connect directly, fall back to your own relay when NAT blocks them, and access follows the rules you set in the admin UI.
Block ads and trackers across a household network by routing DNS requests through a server you control.
Manage two to four Pi-hole v6 instances from one page, using a lightweight homelab dashboard with no backend or database.
A homelab diagram goes stale the moment it is drawn. Homelable rebuilds it from what is running on the network: an nmap scan of your subnets, a Proxmox or Unraid import, the Zigbee and Z-Wave mesh from your MQTT broker. Everything lands on a canvas you drag into shape, with a markdown document per device and a status dot that keeps refreshing.
Block ads and unwanted content for every device on your network with a DNS sinkhole, no client software required.
Updated