WireGuard server with an embedded admin console

Go backend that drives kernel WireGuard over netlink (wireguard-go as the
fallback), nftables NAT with MSS clamping, forwarding and buffer sysctls,
SQLite for peers, users, sessions, traffic history and the audit log.

React console: dashboard with live rates and usage history, peer management
with QR codes and .conf downloads, disconnect, session reset, key rotation,
expiry, client-supplied keys, settings, users with admin and viewer roles,
two-factor authentication with recovery codes, audit log.

Docker image on Alpine with compose files for bridged and host networking,
CI and GHCR publish workflows, performance notes.

This commit is contained in:

jcoffey

2026-09-12 19:56:08 -07:00

commit 6c006e1d4d

72 changed files with 11675 additions and 0 deletions

									
										internal/netcfg/egress_other.go
									
		+8
		
												View File
												
				@@ -0,0 +1,8 @@

				//go:build !linux

				package netcfg

				import "errors"

				// DefaultEgress is only implemented on Linux.

				func DefaultEgress() (string, error) { return "", errors.New("not supported on this platform") }