Projects sharing features with Wireguard Ui

Wirehole is a containerized network stack that integrates a WireGuard VPN server with recursive DNS resolution and sinkhole-based advertisement filtering. It bundles these interdependent services into a single managed environment using a compose-based deployment. The system enables network-wide ad blocking and tracker filtering by intercepting DNS queries via a sinkhole. It implements recursive DNS resolution to resolve domain names independently of external upstream providers and provides a web-based interface for managing VPN client peers and keys. Additional capabilities include split-tun

Pritunl is an enterprise VPN gateway and server manager used to deploy and configure OpenVPN and WireGuard servers through a centralized web interface. It functions as a VPN access control system and an SSH certificate authority, issuing short-lived signed certificates to manage secure shell access and network entry without manual public key distribution. The platform acts as an SSO integrated VPN controller, synchronizing user access and organization mapping with third-party identity providers via OAuth, OIDC, and SAML. It supports high-availability deployments by using database-backed clust

This project is a curated collection of deployment files and configurations for hosting a wide variety of open-source services on a home server. It primarily utilizes Docker and Docker Compose to automate the orchestration, lifecycle management, and deployment of containerized applications. The repository provides a comprehensive suite for self-hosted infrastructure, covering network management tools, media streaming, and home automation. It includes specialized configurations for securing internal services via reverse proxies, WireGuard VPN tunnels, and automated SSL/TLS certificate manageme

Innernet is a WireGuard VPN mesh orchestrator and control plane that automates the deployment of encrypted tunnels between distributed peers. It functions as a virtual private network that coordinates endpoint discovery and distributes network configurations from a centralized server to establish a private overlay network. The system differentiates itself through a structured peer management lifecycle, using single-use invitation files for secure onboarding and cryptographic key exchange. It provides granular network segmentation by organizing peers into named CIDR blocks, allowing administra

This project provides a system for configuring dual-stack connectivity, establishing local proxy ports, and managing policy-based traffic routing. It functions as a utility to add IPv4 and IPv6 network exits to servers and a tool for importing and parsing WireGuard profiles to generate compatible network configurations. The software automates the installation and management of the Cloudflare WARP client across different operating systems. It enables the deployment of secure network tunnels and the creation of local SOCKS5 proxy ports to route specific application traffic without altering glob

wgcf is a network account manager and profile generator used to register service accounts and create configuration files for Cloudflare WARP. It enables the generation of standard WireGuard profiles that allow clients to connect to these network services. The tool includes mechanisms for service account registration and the binding of subscription licenses to activate premium network features. It manages the persistence of account identities and subscription data locally to maintain connectivity. Additional capabilities include network connection verification and diagnostic tools for tracing

This project is a shell-based orchestration tool designed to automate the deployment and administration of WireGuard virtual private network servers on Linux hosts. It functions as a system-level networking utility that handles the installation of kernel modules, the configuration of secure tunnel interfaces, and the management of network routing rules to enable encrypted remote access. The tool provides an interactive command-line interface that simplifies the lifecycle management of network peers. It allows administrators to dynamically add or remove client access profiles, assign custom DN

This project provides a self-hosted, containerized WireGuard VPN server that simplifies network administration through a web-based management interface. It allows users to deploy and manage VPN tunnels, configure peer identities, and monitor connection status without the need for manual configuration file editing. By bundling the VPN stack into a portable container, it ensures consistent deployment and persistent state management across diverse host environments. A key differentiator is the built-in support for traffic obfuscation, which modifies packet headers and handshake patterns to help

This project is a privacy-focused VPN manager and WireGuard client application designed to establish encrypted tunnels that mask user IP addresses and activity. It focuses on maintaining anonymity through a system that supports account creation without personal identifying information. The application distinguishes itself with advanced privacy tools, including a multi-hop orchestrator for routing traffic through multiple sequential servers and a network traffic obfuscator that uses Shadowsocks, TCP, and QUIC to bypass deep packet inspection and censorship. It also implements quantum-resistant

Octelium is a zero-trust network access platform and identity-aware proxy designed to secure private HTTP, SSH, and SQL resources. It functions as a secure gateway that validates human and workload identities using OIDC, SAML, and FIDO2 passkeys before granting access to internal applications and SaaS APIs. The system is distinguished by its secretless access broker, which injects credentials—such as API keys, passwords, and AWS Sigv4 signatures—at the gateway level so users can access databases and cloud resources without managing secrets. It further specializes in AI gateway administration,

eShopOnContainers is a .NET microservices reference application designed to demonstrate cloud-native architecture patterns. It serves as a sample distributed system that implements domain-driven design and utilizes containerized services. The project is developed as a cross-platform sample compatible with Windows, Linux, and macOS. It utilizes Docker for containerized application deployment and supports orchestration via Azure Kubernetes Service to manage the scaling and availability of its services. The system covers microservices architecture design, asynchronous service communication, and

Peppermint is a self-hosted suite of business tools comprising a customer support ticketing system, a client relationship management system, and a markdown-based project notebook. It provides a centralized workflow for resolving technical requests and tracking chronological interaction logs to maintain context within professional relationships. The application is delivered as a containerized business tool, utilizing Docker to ensure consistent deployment and availability across different hosting platforms. It employs a process manager to monitor the application runtime and trigger automatic r

Shiori is a self-hosted bookmark manager and webpage archiving tool. Written in Go, it functions as a backend service that allows users to save, organize, and search for web links while maintaining a private collection of online resources. The system ensures content availability by creating offline copies of saved pages, preventing data loss if the original source is removed. It is distributed as a containerized application to provide consistent installation and deployment across different operating systems. The software provides a dual-interface access model, featuring both a web-based mana

Multica is an autonomous coding agent manager and LLM agent orchestration platform. It coordinates teams of autonomous agents to execute coding tasks and manage their lifecycles through a centralized dashboard. The system provides multi-tenant agent workspaces that isolate agents, settings, and project issues into distinct organizational boundaries. The platform distinguishes itself through an agent skill library that captures successful task solutions as reusable, versioned skills. These skills are shared across the agent team and pinned using content hashes to ensure consistent behavior acr

Reaction is an event-driven, headless commerce platform designed to decouple backend business logic from the frontend presentation layer. It utilizes an API-first architecture with a GraphQL data layer to manage online sales and retail operations. The platform supports multi-tenant resource sharing, allowing multiple independent storefronts to be hosted and managed within a single installation. It features a plugin-based extension system that enables the integration of third-party services and custom business logic through composable workflows. The system covers core retail capabilities incl

This project is a GraphQL web application with a React frontend that utilizes server-side rendering to generate HTML on the server for improved initial load times and search engine indexing. The application supports both static site generation for fast delivery via pre-rendered HTML files and containerized deployment to ensure consistent runtime behavior across different environments. The project includes capabilities for GraphQL data integration, frontend asset optimization through code-splitting, and component UI verification using snapshot testing. It also provides a mechanism for managin

TakeNote is a containerized web application designed as a markdown notes manager for developers. It provides a structured environment for storing technical documentation and plain text snippets using categories and favorites. The application functions as a specialized markdown text editor featuring multi-cursor support and keyboard shortcuts for high-efficiency text manipulation. It includes a live preview mode that renders markdown with syntax highlighting for code blocks. The system covers note organization and management through category-based filtering, bulk collection actions, and a dra

This project is a WhatsApp chatbot that integrates large language models and image generation into the WhatsApp messaging platform. It acts as a bridge connecting WhatsApp messages to OpenAI services to provide automated text and visual responses. The bot features the ability to convert spoken audio messages into written text using automated speech recognition, facilitating conversational interactions via voice. It also functions as a generative image bot, creating custom visual assets from text descriptions. The system is designed for containerized deployment, using Docker to package the ap

Dim is a self-hosted media server and manager designed to index and organize local media libraries for remote access and playback. It functions as a private web-based portal that allows users to stream locally stored video and audio content over a network. The system operates as a local media indexer that scans storage to structure and beautify collections, creating a consistent user interface for managing digital content. It uses metadata-driven beautification to enrich raw file lists into organized libraries. The application is deployed as a containerized service, utilizing static path map

This project is a password management backend designed to store and synchronize encrypted credentials across multiple devices and client applications. It serves as a secure central server that enables the management of secret vaults and password data. The system supports self-hosted secret storage, allowing users to run a private vault on their own hardware to maintain control over their data. It facilitates cross-platform credential syncing to keep passwords updated in real time across various operating systems. The backend is built with a REST-based API gateway, token-based session managem

CookLikeHOC is a dockerized web application that serves as a culinary recipe database and digital cookbook. It provides a structured collection of ingredient lists and cooking instructions derived from restaurant provenance reports to enable the reproduction of authentic meals. The project focuses on traditional Chinese cooking and restaurant recipe replication, specifically tracking culinary provenance to ensure consistent flavor profiles. It includes curated data for regional dishes, braised meats, vegetables, and beverage recipes. The application is designed for containerized deployment t

Cutter is a binary analysis platform and graphical user interface for the Rizin reverse engineering framework. It provides an environment for analyzing the internal logic and data structures of compiled binaries through integrated disassembly and visualization. The platform supports a containerized deployment model to provide isolated environments for binary analysis, which is used to examine suspicious binaries without risking the host system. It is an extensible security tool that allows for the addition of custom analysis capabilities and visualizers via native plugins and scripts. The to

Pangolin is a zero-trust remote access platform designed to provide secure, identity-aware connectivity to private network resources. It functions as a cloud-native network controller that orchestrates encrypted tunnels, traffic routing, and access policies across distributed environments. By leveraging WireGuard for secure data transport, the platform enables authenticated access to internal web applications, terminal sessions, and remote desktops without exposing services to the public internet. The platform distinguishes itself through a declarative infrastructure model that synchronizes n

This project is a collection of automated deployment tools centered around a Shadowsocks server auto-installer for Linux distributions. It provides a specialized SOCKS5 proxy manager and a web-based proxy control panel to administer secure network tunneling. The toolkit distinguishes itself by integrating a Linux kernel optimizer that enables congestion control algorithms to increase network throughput. It also includes a dedicated deployer for HTTP/3 web servers and a management interface capable of generating connection QR codes and monitoring real-time performance. The software covers a b

Teable is a self-hosted relational data management tool and no-code PostgreSQL database. It provides a spreadsheet-like interface for managing and querying structured data, allowing users to interact with a professional database backend without writing manual SQL for every operation. The platform is an extensible low-code system that allows for the integration of custom plugins and extensions through a dedicated application bridge and marketplace. It enables the creation of tailored internal tools by adding new features or modifying behavior via these external extensions. The system covers a

Sn1per is a vulnerability management platform and penetration testing orchestrator designed to automate reconnaissance, vulnerability scanning, and exploit verification. It functions as a dockerized security toolkit that coordinates multiple tools into a unified automated pipeline to identify security flaws across network and web assets. The platform features an attack surface manager for discovering internet-facing assets through OSINT, DNS enumeration, and certificate transparency. It distinguishes itself with an AI-powered security analyzer that uses large language models to summarize scan

Vendure is a Node.js e-commerce engine and headless commerce framework built with NestJS and TypeScript. It serves as a multi-channel commerce platform that manages product catalogs, orders, and customers via a strongly typed GraphQL API. The platform is distinguished by its highly extensible architecture, featuring a customizable administrative dashboard where developers can inject custom React components and entity views. It supports multi-channel commerce, allowing the isolation of products, currencies, and regional catalogs from a single unified backend. The engine covers a broad range o