Warning: This project is under active development and is not secure at the moment. Do not attempt to use this software in any production capacity until this notice is removed.

You have been warned.

FireZone

1. Intro
2. Architecture
3. Install
4. Usage
5. Contributing

Intro

firezone is an open-source WireGuard™ VPN and firewall manager for Linux designed to be easy-to-use, secure, and useful for individuals and small teams.

Use firezone to:

• Connect remote teams in a secure virtual LAN
• Set up your own WireGuard™ VPN
• Block egress traffic to specific IPs and CIDR ranges
• Configure DNS in one central place for all your devices

Architecture

firezone is written in the Elixir programming language and composed as an Umbrella project consisting of three independent applications:

• apps/fz_http: The Web Application
• apps/fz_wall: Firewall Management Process
• apps/fz_vpn: WireGuard™ Management Process

For now, firezone assumes these apps are all running on the same host.

Install

Prerequisites:

1. Postgresql Server 9.6 or higher. Access can be configured in /opt/firezone/config.env after installation.
2. wg, openssl, ip, and iptables must be in your PATH.

Then you can install firezone by downloading the appropriate package from the releases page.

Creating additional admin users

You may create additional admin users with the following command:

/opt/firezone/bin/firezone rpc 'FzHttp.Users.create_user(
  email: "USER_EMAIL",
  password: "USER_PASSWORD",
  password_confirmation: "USER_PASSWORD"
)'

Contributing

See CONTRIBUTING.md.

WireGuard™ is a registered trademark of Jason A. Donenfeld.