[{"data":1,"prerenderedAt":139},["ShallowReactive",2],{"seo-verification":3,"blog-setting-up-a-wireguard-vpn-on-your-vps-ma-en":6,"promo-bar-likely":138},{"google":4,"bing":5},"EycwPY2XMyTkVzas3n1ygeNJFGAH513qrMjfDljzsMQ","",{"key":7,"data":8},"blog-setting-up-a-wireguard-vpn-on-your-vps-ma-en",{"id":9,"slug":10,"slugs":11,"title":15,"excerpt":16,"readTime":17,"views":18,"isPinned":19,"noindex":19,"publishedAt":20,"updatedAt":21,"category":22,"categories":28,"featuredImage":30,"bgImage":31,"posterImage":32,"relatedSolution":33,"intro":36,"sections":37,"ctaTitle":80,"ctaBody":81,"ctaButton":82,"ctaUrl":83,"relatedPosts":84},110,"setting-up-a-wireguard-vpn-on-your-vps",{"fr":12,"en":10,"ar":13,"es":14},"vpn-wireguard-vps","إعداد-شبكة-vpn-باستخدام-wireguard-على-خادمك-vps","montar-una-vpn-wireguard-en-vps","Setting up a WireGuard VPN on your VPS","Deploy a WireGuard VPN on your Cloud VPS: encrypted tunnel, Docker configuration and clients in a few minutes. Step-by-step guide.",3,0,false,"2026-03-02T00:00:00+00:00","2026-09-07T11:26:10+00:00",{"id":23,"name":24,"slug":25,"color":26,"icon":27},8,"Security & Monitoring","securite-monitoring","bg-rose-500\u002F10 text-rose-400","security",[29],{"id":23,"name":24,"slug":25,"color":26,"icon":27},null,"\u002Fblog\u002Fcovers\u002Fbg.svg","\u002Fblog\u002Fcovers\u002Fvpn-wireguard-vps-poster.svg",{"categorySlug":34,"appSlug":35},"networking-vpn","wireguard-server","WireGuard has redefined the modern VPN: a few hundred lines of code, state-of-the-art encryption and throughput close to native. Self-hosted on a VPS, it offers you a private tunnel that you control end to end, without depending on a third-party provider.",[38,42,52,55,77],{"type":39,"title":40,"body":41},"h2","Why self-host WireGuard on a VPS","Commercial VPNs pool thousands of users on the same IP addresses, often keep logs and throttle bandwidth. By deploying WireGuard on your own VPS, you get a dedicated egress IP address, throughput guaranteed by your plan and a logging policy you define yourself. WireGuard works over UDP on a single port, integrates directly into the Linux kernel and negotiates a connection in a fraction of OpenVPN's time. For a developer or an agency, it's also the cleanest way to access internal services (database, admin panel, monitoring) without exposing them publicly: you bind them to the VPN interface only.",{"type":43,"title":44,"items":45},"ul","Concrete benefits of a self-hosted WireGuard",[46,47,48,49,50,51],"Dedicated and stable egress IP, ideal for whitelisting API access or back-offices.","Modern ChaCha20-Poly1305 encryption with a minimal attack surface (4,000 lines of code).","Throughput close to native and near-instant reconnection after a network drop (roaming).","Private access to your internal services by binding them to the VPN subnet (10.0.0.0\u002F24) rather than to 0.0.0.0.","No third-party activity logs: you fully control data retention.","Fixed and predictable cost, independent of the number of connected devices.",{"type":39,"title":53,"body":54},"Requirements for this deployment","WireGuard is extremely lightweight: a VPS with 1 vCPU and 1 GB of RAM is more than enough for a dozen clients, the limiting factor being bandwidth rather than CPU. Plan for Docker and Docker Compose installed (or the native `wireguard-tools` package), a recent Linux kernel (5.6+ integrates WireGuard natively) and the opening of a UDP port, by convention `51820`. A domain name pointing to your VPS (an A record `vpn.mydomain.com`) is recommended to distribute client configurations, but the public IP alone works too.",{"type":56,"title":57,"steps":58},"steps","Deploy WireGuard in a container",[59,62,65,68,71,74],{"title":60,"body":61},"Enable IP forwarding on the VPS","The server must route the tunnel traffic to the Internet. Add `net.ipv4.ip_forward=1` in `\u002Fetc\u002Fsysctl.conf` then apply with `sudo sysctl -p`. Without this, clients connect but have no outbound access.",{"title":63,"body":64},"Start the wg-easy container","The `wg-easy` project provides WireGuard plus a web interface for peer management. In a `docker-compose.yml`, define `WG_HOST=vpn.mydomain.com`, an admin password and expose `51820\u002Fudp` as well as `51821\u002Ftcp` for the UI. Start with `docker compose up -d`.",{"title":66,"body":67},"Open the UDP port at the firewall","Allow inbound traffic on the tunnel port: `sudo ufw allow 51820\u002Fudp`. However, restrict access to the admin UI (`51821`) to your IP only or place it behind the VPN once the first client is connected.",{"title":69,"body":70},"Protect the administration interface with SSL","Place a reverse proxy (Caddy or Traefik) in front of port `51821` to serve the UI over HTTPS on `vpn.mydomain.com` with an automatic Let's Encrypt certificate. Never leave the admin panel accessible over plain HTTP on the Internet.",{"title":72,"body":73},"Create a peer and import the configuration","From the UI, add a client: wg-easy generates a key pair and a QR code. Scan it with the WireGuard mobile app, or download the `.conf` file for `wg-quick up`. The client is operational immediately.",{"title":75,"body":76},"Verify the tunnel","Once connected, check your public egress IP (it should be that of the VPS) and the handshake state on the server side with `docker exec wg-easy wg show`. A recent `latest handshake` value confirms that the tunnel is active.",{"type":78,"body":79},"tip","To turn your VPN into a gateway for accessing internal services without exposing everything, only allow the VPN subnet (for example `10.8.0.0\u002F24`) in the client's `AllowedIPs` instead of `0.0.0.0\u002F0`. You thus get a \"split\" tunnel: only traffic to your private services goes through the VPS, the rest of your browsing exits via your local connection. Combine it with a kill-switch via `PostUp`\u002F`PostDown` to prevent any leak if the tunnel goes down.","Launch your VPN in a few minutes","A ServOrbit Cloud VPS with a preconfigured Docker template lets you deploy WireGuard without friction: a recent kernel, an available UDP port and generous bandwidth for your tunnels.","Deploy my WireGuard VPS","\u002Fvps-cloud",[85,103,122],{"id":86,"slug":87,"slugs":88,"title":92,"excerpt":93,"readTime":23,"views":18,"isPinned":19,"noindex":19,"publishedAt":94,"updatedAt":95,"category":96,"categories":97,"featuredImage":30,"bgImage":31,"posterImage":99,"relatedSolution":100},105,"monitoring-your-vps-with-uptime-kuma",{"fr":89,"en":87,"ar":90,"es":91},"superviser-vps-uptime-kuma","مراقبة-خادمك-الافتراضي-vps-باستخدام-uptime-kuma","supervisar-vps-con-uptime-kuma","Monitoring your VPS with Uptime Kuma","Deploy Uptime Kuma on your VPS to monitor your sites and services self-hosted, with alerts and a public status page.","2026-03-07T00:00:00+00:00","2026-11-09T20:55:19+00:00",{"id":23,"name":24,"slug":25,"color":26,"icon":27},[98],{"id":23,"name":24,"slug":25,"color":26,"icon":27},"\u002Fblog\u002Fcovers\u002Fsuperviser-vps-uptime-kuma-poster.svg",{"categorySlug":101,"appSlug":102},"monitoring-observability","uptime-kuma",{"id":104,"slug":105,"slugs":106,"title":110,"excerpt":111,"readTime":112,"views":113,"isPinned":19,"noindex":19,"publishedAt":114,"updatedAt":115,"category":116,"categories":117,"featuredImage":30,"bgImage":31,"posterImage":119,"relatedSolution":120},106,"vps-monitoring-with-grafana-and-prometheus",{"fr":107,"en":105,"ar":108,"es":109},"monitoring-vps-grafana-prometheus","مراقبة-الخادم-الافتراضي-vps-باستخدام-grafana-و-prometheus","monitorizacion-vps-grafana-prometheus","VPS Monitoring with Grafana and Prometheus","Deploy Prometheus 3.x, Grafana 13.x, Node Exporter and Alertmanager on your VPS with Docker Compose. Dashboards, alerts and hardening.",11,1,"2026-03-06T00:00:00+00:00","2026-10-05T14:05:27+00:00",{"id":23,"name":24,"slug":25,"color":26,"icon":27},[118],{"id":23,"name":24,"slug":25,"color":26,"icon":27},"\u002Fblog\u002Fcovers\u002Fmonitoring-vps-grafana-prometheus-poster.svg",{"categorySlug":101,"appSlug":121},"grafana",{"id":123,"slug":124,"slugs":125,"title":129,"excerpt":130,"readTime":17,"views":113,"isPinned":19,"noindex":19,"publishedAt":131,"updatedAt":21,"category":132,"categories":133,"featuredImage":30,"bgImage":31,"posterImage":135,"relatedSolution":136},107,"monitor-your-vps-in-real-time-with-netdata",{"fr":126,"en":124,"ar":127,"es":128},"monitorer-vps-netdata","راقب-خادمك-الافتراضي-vps-في-الوقت-الفعلي-باستخدام-netdata","monitorizar-vps-en-tiempo-real-con-netdata","Monitor your VPS in real time with Netdata","Install Netdata on your VPS for per-second real-time monitoring: thousands of metrics, zero configuration, alerts included.","2026-03-05T00:00:00+00:00",{"id":23,"name":24,"slug":25,"color":26,"icon":27},[134],{"id":23,"name":24,"slug":25,"color":26,"icon":27},"\u002Fblog\u002Fcovers\u002Fmonitorer-vps-netdata-poster.svg",{"categorySlug":101,"appSlug":137},"netdata",true,1794270503021]