# tunwg

> Tunwg is a self-hosted, open-source ngrok alternative creating encrypted WireGuard tunnels with automatic HTTPS certificates and custom domains.

- **Category:** Network
- **Licence:** MIT
- **Latest version:** v25.11.15+bbd247b
- **Open source:** oss
- **Languages:** Go
- **Platforms:** Docker, Docker Compose, Go, Linux
- **Tags:** Tunnel, HTTPS, Wireguard, Reverse Proxy, Golang, Self Hosted, Letsencrypt, Ngrok alternative, Wireguard Tunnel

## Description

Tunwg creates secure WireGuard tunnels to expose local HTTP servers to the internet with automatic HTTPS certificates. It runs as a single binary or Docker container, supports custom domains via CNAME, persistent URLs derived from WireGuard keys, HTTP Basic Auth, PROXY protocol for real client IPs, and can relay traffic over HTTPS when UDP is blocked. The server is stateless and requires no database. Users can self-host both the client and server components, or use the public instance at l.tunwg.com. It also provides a Go library for embedding tunnel functionality directly into Go applications.

## Links

- [Homepage](https://github.com/ntnj/tunwg)
- [Website](https://tunwg.com)
- [Docker](ghcr.io/ntnj/tunwg)
- [GitHub Repository](https://github.com/ntnj/tunwg)
- [Documentation (README)](https://github.com/ntnj/tunwg/blob/master/README.md)

---
Source: https://selfhost.directory/project/tunwg