Wireguard GUI

WireGuard is a modern, simple, and fast VPN protocol designed to be easy to configure and highly secure.

WireGuard GUI is a graphical interface designed to make it easier for users to configure and manage their WireGuard VPN connections — without needing to edit configuration files manually.

🚀 Quick Start

1. Launch the Ghaf Control Panel

2. Click the WireGuard GUI button

Note

wireguard-gui service should be enabled to appear Wireguard GUI button. It can be enabled to add vm nix config like following:

ghaf.reference.services.wireguard-gui.enable =true;

3. Click the Generate Configs to generate template configuration files
4. Enter your configuration details for required sections
5. Click the Generate button

6. Enter your peer configuration details such as AllowedIPs, Endpoint, and PublicKey
7. Click Save — a confirmation dialog will appear once the configuration is saved successfully
8. Use the toggle switch to turn the WireGuard tunnel interface on or off

Note

For more information, see the config file documentation:

• wireguard config file

⚙️ Configuration Scenarios

Note

The following examples represent only the local WireGuard GUI configuration. Peer-side configurations are not included.

1. Split-tunnel VPN as client

Use this configuration if you want only specific traffic to pass through the VPN tunnel, while other traffic goes through your normal network connection.

You can try to ping: ping 10.10.10.0

2. Full-tunnel VPN as client

Use this mode if you want all network traffic to be routed through the VPN tunnel for maximum privacy and encryption.

You can run curl ifconfig.me command and response should be vpn server’s public IP. For our case it should be 1.2.3.4

3. VPN as server

Configure WireGuard as a server to accept connections from multiple clients.

You can try to ping: ping 10.10.10.0

Note

• You can use an IP calculator to help generate correct AllowedIPs values: WireGuard AllowedIPs Calculator
• wg-quick

🔍 Troubleshooting

If the WireGuard GUI is not visible or not working as expected, you can check system logs for more details.