Features

VPN Peer Management

• Create, edit, enable/disable, and delete WireGuard peers
• Automatic key generation (private key, public key, preshared key)
• Automatic IP allocation from a configurable subnet
• Downloadable peer configuration files and QR codes
• Real-time peer status monitoring (online/offline)
• Hot-reload via wg syncconf — no VPN restart needed

Reverse Proxy (Layer 7)

• Domain-based reverse proxy routes powered by Caddy
• Automatic HTTPS with Let's Encrypt
• Optional Basic Authentication per route
• Route Authentication with Email+Password, OTP, TOTP, 2FA
• Custom branding per route (logo, colors, background image)
• IP Access Control / Geo-Blocking per route

Layer 4 TCP/UDP Proxy

• Raw TCP/UDP port forwarding via caddy-l4
• Reach RDP, SSH, databases, or game servers through GateControl
• TLS passthrough and TLS termination
• Port ranges (e.g. 5000-5010)

Uptime Monitoring

• HTTP and TCP health checks per route
• Automatic email alerts on outages and recovery
• Dashboard widget with real-time status

Monitoring & Logging

• Real-time traffic monitoring with upload/download per peer
• Per-peer traffic history with interactive charts (24h, 7d, 30d)
• Dashboard with CPU, RAM, uptime, traffic charts
• Activity log with severity levels and filtering

Backup & Restore

• Full system backup as portable JSON
• Encryption key validation on restore
• Atomic transaction-based restore

Email Alerts

• Event-based notification system (Security, Peers, Routes, System)
• Backup reminders, CPU/RAM threshold alerts
• Webhooks for external services (Slack, Discord, etc.)