wg-easy VS wireguard-install

After browsing through, I've noticed that three options seem to be gaining traction: Netmaker, wg-easy, and headscale. I'm curious to know if these solutions are interchangeable, and if there are specific reasons to choose one over the others. I'd also like to understand if they are complete stacks, meaning, once set up, could I easily replace one admin GUI with another, or would I need to tear down and rebuild the VPN?

WireGuard is the solution to everything! It has an app and they can easily login via a QR code that you send them. For the server I would recommend wg-easy, there you can manage all user accounts in a web interface.

I use this, https://github.com/WeeJeWel/wg-easy

Dashboard with access to the QR and config files for clients as well as bandwidth data. Even something as simple as wg-easy would be great.

I run wg-easy https://github.com/WeeJeWel/wg-easy for this sort of thing. I use the docker container, and it's great. "Just works".

Also, unrelated, I just decided I don't like the sentiment of "PiMyProjectName" branding. I know most projects don't just run on a Pi, and that the intent is to say "you can self-host thing", but at this point if you want to run a home server sort of thing, just buy some cheap 100-200 dollar minipc thing. That's how much you'd pay for a Pi now anyway, and it comes with such great features as:

* just establishing an ssh connection doesn't take multiple seconds

* the ethernet doesn't go over a usb hub

* it doesn't run on an sd card that is going to fail within a year

I'm pretty dismissive of ARM chips for homelab stuff at this point. There's super cheap minipcs with "real" processors that will just destroy even an expensive ARM board.

Pi's shine with their ability to run both a real/full Linux and also do gpio type stuff that otherwise is usually an arduino board. I don't have anything against low-level programming but damn is it just a lot more fun to do in python. I love the Rpi zero w 2 products for this, just enough juice to run wifi and a python loop, plus the gpio pins. Too bad they've been sold out for literally years.

J'ai installé Wireguard Server sur un VPS en utilisant [https://github.com/weejewel/wg-easy Peer to Peer Ping, mais je ne peux pas ping-ping à des pairs du serveur.

To expand: I'd recommend wireguard it's super easy to run with docker, openvpn is way more annoying to setup The Github page for wg-easy docker image

for wireguard im using wg-easy

Btw you can try this script..

If you want an easy setup I suggest using a script like this. Even a novice should be able to set up Wireguard in about half an hour - assuming they already have a DynDNS service set up.

Really depends on what you want to do. I run an Ubuntu server VM with Wireguard (my preferred script) , an openmediavault VM to take care or my NAS, HDDs (SATA controller is passed through) with mergerFS+Snapraid) and it also serves as my docker host, pihole VM for DNS (also allows you create your own, local DNS entries so you do not have to use the device's IP)

Yes, and no. Server security is a rather complex topic and covering it in a few sentences is impossible. Try to expose as few of your services as possible to the open web and also ensure they are well maintained - on your side (AKA update your stuff regular) and on the dev side. Seeing that the last github update was over ~6 months ago likely means there are unmitigated security risks. You can expect large projects like Plex, Nextcloud, Bitwarden(Vaultwarden), and others to be built well enough that they do not pose a significant risk. Anything else should only be accessible over a VPN. I am not talking about the commercial ones like PIA or NordVPN. These are mainly useful to circumvent geo restrictions, get better peering, and some other stuff. In terms of security, it does almost nothing despite what the ads claim. What I am talking about is running your own VPN server. Easily doable when you run a home server anyway by running a Wireguard script. By connecting to it remotely you will be able to access your home network as if you were at home although a bit bandwidth limited due to slow internet connections.

but if you don't then this is probably fine as well but I never used it https://github.com/angristan/wireguard-install

I personally use this script to setup a wireguard server. Doing it by hand is totally possible but this makes things a bit easier.

I do the same with Amazon and haven't had any issues. I run wireguard on an Amazon instance with the following script: https://github.com/angristan/wireguard-install