Islandr

Self-hosted WireGuard management platform. Peer lifecycle, RBAC access control, nftables enforcement.

Inbound

System Description Technology
Cloudflare / Reverse Proxy Forwards to (optional layer) HTTP or HTTPS

Outbound

System Description Technology
nftables Generates and atomically reloads ACL ruleset nft CLI
OIDC Provider Verifies ID tokens via OIDC / JWKS HTTPS
Resource Host Proxies browser RDP over TLS (RDCleanPath) TCP/TLS
WireGuard Configures peers wg CLI