Wireguard (VPN & Web-based Admin UI)

This document explains how WireGuard VPN is deployed, accessed, and managed when installed as a One-Click App on FlyWP.

What is WireGuard VPN

WireGuard is a modern, high-performance VPN protocol designed to be simple, fast, and secure. It uses state-of-the-art cryptography and has a minimal attack surface compared to traditional VPN solutions.

FlyWP provides WireGuard as a one-click VPN server with a web-based admin UI, eliminating manual key generation and configuration.

Deployment Overview

When you deploy WireGuard from:

Create Site → Deploy One Click App → WireGuard VPN

FlyWP automatically:

• Installs and configures WireGuard
• Sets up the web-based admin UI
• Assigns a FlyWP subdomain or custom domain
• Configures firewall and networking rules
• Enables SSL for the admin UI

No manual WireGuard or CLI setup is required.

Default Access URLs

After deployment, two components are available:

• WireGuard Admin UI
  https://<your-domain>/
• WireGuard VPN Service
  Runs on the WireGuard UDP port (configured automatically)

The Admin UI is used to manage peers and download client configurations.

Authentication & Login

The WireGuard Admin UI is protected by credentials generated during deployment.

• Login details are available in the FlyWP dashboard under the site details

Store these credentials securely. Anyone with access can generate VPN clients.

Admin UI Capabilities

From the WireGuard Admin UI you can:

• Create and manage VPN peers (clients)
• Download client configuration files
• Generate QR codes for mobile devices
• Enable or disable peers
• View connected clients

No manual key handling is required.

Client Setup

WireGuard clients are available for:

• Windows
• macOS
• Linux
• iOS
• Android

Steps

1. Create a peer in the Admin UI
2. Download the configuration file or QR code
3. Import it into the WireGuard client
4. Activate the tunnel

Once connected, traffic is securely routed through the VPN.

Environment & Configuration

Most WireGuard settings are managed internally by the Admin UI.

FlyWP handles:

• Network interface configuration
• IP routing
• Firewall rules
• Service restarts

Advanced customization beyond the Admin UI is not recommended unless you understand WireGuard networking deeply.

SSL & Security

• Admin UI is protected by HTTPS
• VPN traffic is encrypted using WireGuard cryptography
• Keys are generated per peer

Security Best Practices

• Use strong admin credentials
• Disable unused peers
• Rotate peers if a device is lost
• Restrict Admin UI access via firewall or IP allowlist

Managing WireGuard from FlyWP

From the FlyWP dashboard:

• Manage → Restart or redeploy the VPN service
• Logs → View service logs
• NGINX Config → Modify admin UI routing (advanced use only)

Avoid manual changes outside FlyWP unless necessary.

Troubleshooting

Client Cannot Connect

• Verify the tunnel is active
• Check server is running
• Confirm firewall allows WireGuard UDP port

Admin UI Not Accessible

• Ensure the domain is correct
• Check SSL status
• Restart the service from FlyWP

No Internet Through VPN

• Check client routing settings
• Recreate the peer configuration

When to Use WireGuard on FlyWP

WireGuard One-Click App is ideal for:

• Secure remote server access
• Private browsing over untrusted networks
• Team VPN access
• Lightweight site-to-server tunnels

Not intended for complex enterprise mesh VPNs.

Summary

FlyWP’s WireGuard VPN One-Click App provides:

• Instant VPN server deployment
• Simple web-based management
• High performance and strong encryption
• Minimal operational overhead

It is a practical, secure VPN solution for individuals and small teams.