The popular self-hosting tool WireGuard Easy (wg-easy), which combines a WireGuard VPN server with a convenient web interface, has been released as version 15.4. The headline change is support for external OAuth login.
Instead of signing in only with a local password, access can now be secured through an external identity provider. Especially in larger setups, this makes central, secure management of accounts easier.
Security and speed
- Security: improved handling of TOTP (one-time codes), additional protection against injection attacks, and escaping of Prometheus label values.
- Performance: client status is now combined in linear time, and repeated scans on CIDR changes are eliminated.
- More options: the Table parameter in
wg0.confcan be set, ip6tables operations are omitted when IPv6 is disabled, and release checks can be turned off.
Technically, the project has also moved to Nuxt 4 and migrated its interface to Reka UI, bringing numerous bug fixes along the way. For homelab users who want to run their own VPN simply, wg-easy remains one of the most convenient solutions.
Sources: Linuxiac, wg-easy on GitHub.
