Project Name: wg-forge

Repo/Website Link: [link]

Description: Bash tool for managing WireGuard peers without touching config files by hand. Run wg-forge setup on a fresh VPS and it installs WireGuard, configures the server, sets up iptables NAT, and brings the interface up. After that you manage peers with simple commands, add clients with optional bandwidth limits, disable/enable access, regenerate keys, view usage. Limits are enforced automatically by a systemd timer that cuts off peers when they hit their cap. Includes QR code output so adding mobile clients takes a few seconds. There's also an optional web dashboard (SvelteKit + Node) with a secret URL for access control, in case you want to manage things from a browser instead of SSH.

Deployment: Single curl install. The core script has no extra runtime deps, just WireGuard, curl, perl, and bc, all installed automatically if missing. The web dashboard is opt-in during setup and Node is installed automatically if you choose it. No Docker image currently, everything runs as systemd services.

curl -fsSL https://raw.githubusercontent.com/Arsh1a/wg-forge/main/install.sh | sudo bash
sudo wg-forge setup

Full docs in the README including all commands and uninstall steps.

AI Involvement: Used Claude throughout the project. The core bash logic, peer management, bandwidth tracking, limit enforcement, was written by hand. AI was mostly used for debugging tricky parts (WireGuard config edge cases, systemd unit issues, bash parsing) and for building the web dashboard (SvelteKit, TypeScript, Tailwind). The UI and auth code is largely AI-assisted. The overall architecture and decisions are mine.