kaisatoshi/wg-easy-custom repository overview

⁠wg-easy-custom

A fork of wg-easy v14⁠ with client expiry management — set a lifetime for each WireGuard client directly from the UI.

Works over HTTP without a domain (unlike v15 which requires HTTPS).

⁠What's new

• Expiry on creation — set days / hours / minutes when creating a client (optional, leave empty for unlimited)
• Extend or reset — calendar button on each client opens a modal to add time from now
• Auto-disable — expired clients are automatically disabled every minute
• Smart toggle — manually enabling an expired client makes it permanent (∞)
• Two quick actions in the expiry modal:
  • ⛔ Reset time — clears expiry and disables the client (revoke access)
  • ∞ Make permanent — clears expiry, client keeps running
• Visual status badge — ⏳ 3 d. 2 h. / ⏳ 45 min. / ⛔ Expired / ∞
• Expired rows are dimmed (opacity) for easy identification

⁠Quick start

services:
  wg-easy:
    image: kaisatoshi/wg-easy-custom:latest
    container_name: wg-easy
    environment:
      - LANG=en
      - WG_HOST=YOUR_SERVER_IP
      - PASSWORD_HASH=$$2a$$12$$YOUR_BCRYPT_HASH
    volumes:
      - etc_wireguard:/etc/wireguard
    ports:
      - "51820:51820/udp"
      - "51821:51821/tcp"
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    sysctls:
      - net.ipv4.ip_forward=1
      - net.ipv4.conf.all.src_valid_mark=1
    restart: unless-stopped

volumes:
  etc_wireguard:

⁠Generate password hash

docker run --rm ghcr.io/wg-easy/wg-easy:14 wgpw 'YOUR_PASSWORD'

⁠Environment variables

⁠Requirements

• Docker 20+
• Linux with WireGuard kernel module (wireguard-tools)
• No domain required — works on plain IP over HTTP

⁠Based on

wg-easy⁠ v14 by WeeJeWel⁠ — MIT License

⁠Source

GitHub: KaiSatoshi/wg-easy-custom⁠