WGX shares its name with several other WireGuard tools, so the project
becomes ihasvpn, alongside ihasmail.
- Module github.com/Coffey-Labs/ihasvpn, command cmd/ihasvpn, image
ghcr.io/coffey-labs/ihasvpn.
- Environment variables move from WGX_* to IHASVPN_*. The default database
is ihasvpn.db, the nftables table is `ihasvpn`, metrics are ihasvpn_*, and
the session cookie and theme key are renamed, so existing sessions end.
- The mark is the ihasmail cat peeking over the edge of a shield, drawn as
a vector. docs/brand/generate.py builds the mark, mono mark, wordmarks,
social card, favicons and app icons from that one drawing.
- The console takes ihasmail's palette: the ihasmail.org teal-navy for dark,
its contrast-checked light tiers with the site's light accent, received
traffic in the cat's orange and sent in teal. The wordmark weight and
font stack follow ihasmail.org.
- Detail values wrap at spaces before breaking inside an address, so an
IPv6 tunnel address no longer splits mid-number.
- The README history note about the earlier WGX installer is gone with the
name it explained. Screenshots retaken.
A new mark: a padlock on a shield with the W as its keyhole, in the
console's teal on a dark shield. It replaces the placeholder W tile in the
sidebar, on the sign-in and setup pages, and as the favicon, with app icons
and a web manifest. The SVG sources, a single-colour variant, a wordmark
and a social preview image live in docs/brand.
The console now has a theme choice: dark by default, light, or follow the
system, switched from the sidebar or the Account page and remembered per
browser. The light palette is a first-class theme rather than a media
query, so both are laid out the same way.
The README opens with the mark and gains a History section about the 2025
WGX installer this replaces.
Go backend that drives kernel WireGuard over netlink (wireguard-go as the
fallback), nftables NAT with MSS clamping, forwarding and buffer sysctls,
SQLite for peers, users, sessions, traffic history and the audit log.
React console: dashboard with live rates and usage history, peer management
with QR codes and .conf downloads, disconnect, session reset, key rotation,
expiry, client-supplied keys, settings, users with admin and viewer roles,
two-factor authentication with recovery codes, audit log.
Docker image on Alpine with compose files for bridged and host networking,
CI and GHCR publish workflows, performance notes.
jcoffey-dev
jcoffey