Self-host Firefly
v4.4WireGuard VPN server with web management UI
- Stars
- 486
- Ports
- 50120 (WireGuard UDP), 50121 (Web management UI), 50122 (TCP relay)
uusec/fireflyWhat is Firefly?
Firefly is a WireGuard VPN server designed for remote access, remote work, and exposing local services behind NAT or firewalls. It provides a web management UI for creating and managing WireGuard client configurations, which can be imported via QR code on mobile or configuration files on desktop. The server is a single Go binary under 13 MB with no external WireGuard dependency, supporting Linux x86 and ARM architectures. It offers automatic Let's Encrypt certificate provisioning, TCP relay on port 50122 to circumvent UDP throttling, and runs on ports 50120 (UDP WireGuard), 50121 (web UI), and 50122 (TCP relay). Deployment options include direct binary installation as a systemd service or Docker Compose. The license permits personal free use only; commercial use requires purchasing the source code.
Should you self-host Firefly?
Firefly scores 40/100 on selfhost.directory (how scoring works) and ranks #49 of 56 in VPN. It has 486 GitHub stars.
There was no stable release in the past 12 months, so check the repository's recent activity before you rely on it.
Setup is moderate: expect some configuration beyond a single command. An official Docker image is available. It is written mostly in Dockerfile.
Its closest alternative on selfhost.directory is Tailscale (84/100, 38 203 stars). It scores higher overall, so compare the two before you pick. See Firefly vs Tailscale side by side.
Features
- Automatic SSL certificates
- Configuration file export
- Docker Compose Deployment
- Multi-language UI
- Native WireGuard client support
- Persistent keepalive
- QR code client configuration
- Systemd service installation
- TCP RelayMarked as advanced version feature in the README
- Traffic statistics
- Web management UI
Firefly README
More in Network
gluetunVPN client in a thin Docker container for multiple VPN providers, written in Go, and using OpenVPN or Wireguard, DNS over TLS, with a few proxy servers built-in.
hass-otbr-dockerSelf-hosted Docker container running a stand-alone OpenThread Border Router for Home Assistant Thread/Matter support without Yellow or HassOS.
IPFS Web UISelf-hosted, open-source browser UI for a local Kubo IPFS node. View status, manage files, explore IPLD data, visualize peers, and configure settings without the CLI.
ipxboxSelf-hosted, open-source DOSBox IPX server in Go with TAP bridging, PPTP for Windows 9x, and Quake proxy for retro multiplayer gaming.
knockerKnocker is a self-hosted, open-source SPA gateway for homelabs that opens services on-demand via authenticated knock requests, integrating with Caddy or Firewalld.
labcaSelf-hosted private Certificate Authority based on Let's Encrypt's Boulder, providing automated HTTPS certificates for internal apps via ACME with a web GUI.
LancacheSelf-hosted, open-source Docker container that caches game downloads from Steam, Origin, Battle.net, and other CDNs to save bandwidth on local networks.
LantunnelLantunnel is a self-hosted, open-source mesh VPN connecting devices via direct P2P encrypted paths with relay fallback — no port forwarding needed.
MeshLANMeshLAN is a self-hosted, open-source virtual LAN connecting Windows devices over encrypted P2P tunnels with relay fallback and MeshDNS on your own Linux control plane.
nas-doctorSelf-hosted NAS monitoring with SMART health, Docker, ZFS, UPS tracking, service checks, and Prometheus metrics — runs on Unraid, TrueNAS, Synology, Proxmox, Kubernetes.
Nova ServerSelf-hosted proxy running Xray, sing-box, AmneziaWG behind one port with trilingual admin panel, multi-user management, Iran bridge tunnels, Telegram bot.
nsdNSD is an open-source, self-hosted authoritative DNS name server optimized for speed and reliability, used by root servers and TLD registries worldwide.
0 comments