If, like me, you fell in love with Wireguard VPN, you may want to simplify your life to manage the user accounts of this VPN server as fast as it is secure.
For that, I have a solution: Subspace and Wg Gen Web !
The subspace is a GUI, i.e. a graphical user interface that allows, directly from your browser, to add or remove authorized devices (MacOS, Linux, Windows, Android and iOS) on your Wireguard VPN and to retrieve the QR codes or configuration files related to each of these devices.
But where you should be interested, especially in a professional environment, is that it is possible to interface the subspace with a SAML provider to do SSO (Single Sign On).
The configuration on your server is very simple. Es Go and Subspace automatically integrate TLS encryption through Let’s Encrypt.
The Github reservoir of subspace is here.
Wg Gen Web
The other tool is Wg Gen Web which I think is a bit nicer and which allows, there too, to create/delete user accounts, to retrieve the QR Code or the client configuration, but also to send it directly by email to interested people. I do not recommend you to use this feature for security reasons.
But Wg Gen Web also allows you to temporarily activate or deactivate accounts. Wg Gen Web can run on a classic server, but also on a Docker machine.