Skip to content

AWG Admin v1.0.0

Choose a tag to compare

View all tags
@ks-tool ks-tool released this 03 Jul 07:01
v1.0.0
3cc127e

An admin tool for managing AmneziaWG/WireGuard servers, the VPN peers connected to them, and the users those peers belong to. One instance manages many servers, each running a small agent that owns the actual interfaces on that box.

Runs two ways from the same codebase:

  • Desktop app (Wails) — Windows, macOS, Linux. Local, single-user, no login.
  • Self-hosted web server — a small service you host yourself, reachable from a browser (single admin login).

Features

  • Servers & one-click deploy — add a server with SSH (key, uploaded key, or password; passphrase-protected keys supported), then Deploy agent over SSH — systemd (kernel/dkms) or Docker (userspace) — with fail-fast pre-checks. Reusable agent-source presets (release URL, local file, or Docker image), with image sources hidden when the server has no usable Docker.
  • Interfaces — create/edit/delete AmneziaWG/WireGuard interfaces with addresses, keys and obfuscation parameters filled in for you; an Amnezia tab with generated, editable Jc/S/H/I params; an activate toggle; wg-quick-style hook commands.
  • Users & peers — issue/revoke peers per user with ready-to-use client configs and QR codes, optional per-peer DNS/PSK/imported keys, migrate a peer to another interface, and activate/deactivate a peer without deleting it. Input validation catches duplicate/out-of-subnet addresses and name/port/subnet clashes.
  • Multi-hop tunnels — a wizard chains a client's entry interface out through a second server, so clients egress through a chosen exit node (shared address pool, policy routing set up for you).
  • The agent dialog — one place to operate a server's agent: its reported version and capabilities, deploy, sync, reconcile, the monitoring toggle, and profiling (toggle + download a pprof dump for diagnosing a misbehaving agent).
  • Dashboard & metrics — per-server tri-state agent status, agent type/host-info badges, active vs currently-connected peer counts, and CPU/RAM/load/network + per-peer traffic charts.
  • Reconcile — diff what the agent actually has against your database and resolve drift (import / delete / re-push).
  • Reaching agents — automatic SSH tunnel (resilient reconnect/retry), or direct mTLS on a public IP.
  • Backup & migration — export your whole setup to a portable JSON f installs with awg-migrate.
  • Fully bilingual (English / Russian); desktop log capture + debug toggle.

Getting it

  • Desktop — download for your OS below:
    • Windows: amnezia-admin-amd64-installer_.exe (NSIS) or
    • macOS: amnezia-admin_.dmg (universal). Unsigned — right-click → Open, or xattr -cr "/Applications/Amnezia Admin.app".
    • Linux: the plain binary (needs libgtk-3, libwebkit2gtk-4.1).
  • Self-hosted server — the awg-admin archive below, or Docker:
    docker run -d --name awg-admin -p 8080:8080 -v awg-admin-data:/data
  • First login is admin / admin — change it immediately under Settings.

Then deploy the agent to each server you want to manage.

Assets 12
Loading