TunGuard Installer

One-command installer for TunGuard — a userspace WireGuard VPN server with a web dashboard and SSH gateway.

Install

curl -fsSL https://raw.githubusercontent.com/TunGuard/get/main/installer.sh | bash

The script will:

1. Detect your OS and architecture (linux/amd64, arm64, or 386)
2. Download the latest release binary from GitHub
3. Install it to /usr/local/bin/tanguard
4. Optionally set up a systemd service to run automatically on boot

What is TunGuard?

TunGuard is a self-contained WireGuard server that runs entirely in userspace — no kernel modules, no apt install wireguard, no kernel configuration.

• Web dashboard — manage peers, generate configs, scan QR codes from your browser
• SSH gateway — SSH into any connected peer through the server
• HTTP API — integrate with your own tools (PHP, curl, etc.)
• Single binary — statically linked, copy it to any Linux server

Quick Start

# Install
curl -fsSL https://raw.githubusercontent.com/TunGuard/get/main/installer.sh | bash

# Run manually (if not using systemd)
sudo tanguard -web

# Open http://yourserver:9000
# Login: admin / tanguard

systemd Management

sudo systemctl start tanguard
sudo systemctl stop tanguard
sudo systemctl restart tanguard
sudo systemctl status tanguard
sudo journalctl -u tanguard -f

Config

Edit the environment variables in /etc/systemd/system/tanguard.service, then restart:

sudo systemctl daemon-reload
sudo systemctl restart tanguard

Variable	Default	Description
WG_LISTEN_PORT	13231	WireGuard UDP port
WG_ADDRESS	10.100.0.1/24	Server IP on VPN subnet
API_LISTEN	:9000	Web UI + API address
WEB_USERNAME	admin	Dashboard login
WEB_PASSWORD	tanguard	Dashboard password
SSH_USER	tanguard	SSH gateway user
SSH_PASSWORD	tanguard	SSH gateway pass

See the full README for all options.

Uninstall

sudo systemctl stop tanguard
sudo systemctl disable tanguard
sudo rm /etc/systemd/system/tanguard.service
sudo rm /usr/local/bin/tanguard
sudo systemctl daemon-reload