System Online / v1.0.0

The operating system for your WireGuard network

Deploy, monitor, and secure your VPN infrastructure
from a single, beautiful control plane.

Deploy Now View Source
terminal
$ docker compose up -d
tunnbox.local:51821
TunnBox Dashboard — manage WireGuard interfaces, peers, and monitoring from a single view
Capabilities

Everything you need.
Nothing you don't.

01

Command Center

Total control, zero friction

Stop editing config files by hand. Deploy tunnels, generate keys, export configs, and onboard users — all from one interface.

  • Instant tunnel deployment
  • Auto-generated keys
  • QR code mobile access
  • One-click config export
02

Live Monitoring

See everything in real-time

Watch your network breathe. Live traffic visualization, connection health checks, latency tracking, and auto-refreshing dashboards.

  • Real-time traffic maps
  • Active peer monitoring
  • Handshake & latency tracking
  • Auto-refresh dashboards
03

Fortress Security

Enterprise-grade by default

JWT authentication, full audit trails, hardened security headers, and non-root container execution. Sleep soundly.

  • JWT token authentication
  • Complete audit trails
  • HSTS, CSP, XSS protection
  • Non-root containers
04

Developer-First

Built for your workflow

Full REST API, async Python backend, SvelteKit frontend, native Docker support. Automate everything.

  • Complete REST API
  • Async Python + SvelteKit
  • Docker & Compose native
  • Mock backend for dev
Quick Start

Production-ready
in 60 seconds

Three commands. That's all it takes to go from zero to a fully operational WireGuard management server.

3 commands
1 dependency
<60s to running
quick-start.sh
# 1. Create directory
$ mkdir tunnbox && cd tunnbox
# 2. Download config & set secrets
$ curl -o .env https://raw.githubusercontent.com/pgorbunov/tunnbox/v1.0.0/.env.example
$ SECRET_KEY=$(openssl rand -hex 32)
$ sed -i "s/^SECRET_KEY=.*/SECRET_KEY=$SECRET_KEY/" .env
$ sed -i "s/^WG_DEFAULT_ENDPOINT=.*/WG_DEFAULT_ENDPOINT=your.server.ip/" .env
# 3. Launch
$ docker compose up -d
✓ Container tunnbox-app Started
✓ Container tunnbox-wg Started
▶ Running at http://localhost:51821
Architecture

Built on a modern,
high-performance stack

Frontend SvelteKit
→
Backend Async Python
→
Engine WireGuard
→
Deploy Docker

Your network.
Your rules.

Open source. Forever free. Deploy in under a minute.

Start Building Read Documentation