Deploy Defguard in one click installation.
Open-source zero-trust access management with native WireGuard multi-factor authentication and built-in OpenID Connect.
What you can build with Defguard
Defguard is an enterprise-grade zero-trust access management platform built around WireGuard, the only solution that adds real multi-factor authentication directly to the VPN tunnel rather than wrapping a separate application gateway around it. This template deploys the complete Defguard 2 stack: the Core management interface and OpenID Connect provider, the public Edge component for user enrollment, and a WireGuard Gateway, all linked automatically with mutual TLS.
Self-hosting Defguard on your own VPS keeps user directories, hardware keys, audit logs, and OpenID signing keys entirely under your control. Add more gateways anywhere on your network later, while Core stays the single source of truth for identity, devices, and access policies.
Key features of Defguard
WireGuard with MFA
Enforce TOTP, email, or hardware-key second factors directly on every WireGuard connection instead of relying on a separate access gateway.
Built-in OpenID Connect
Integrated OIDC identity provider lets Defguard issue SSO tokens for your other applications without deploying Keycloak or a third-party IdP.
Remote user enrollment
Onboard new users through the public Edge portal, which sets passwords, provisions devices, and configures the desktop client automatically.
ACLs and firewall rules
Define network segmentation and per-user access policies that propagate to Linux and FreeBSD/OPNsense gateways in real time.
LDAP and AD sync
Two-way synchronization with Active Directory and LDAP keeps users, groups, and group memberships consistent across systems.
Device posture checks
Require minimum client and OS versions, disk encryption, or antivirus before a device is allowed to connect to a location.
Why run Defguard on Hostinger
Launch in one click
Get your application up and running instantly with a preconfigured setup. No manual installation or complex setup steps.
Security you can rely on
Keep your applications protected with a built-in firewall, DDoS protection, and continuous monitoring.
Built in Docker manager
Run and manage multiple Docker containers from one place. Deploy, update, and monitor your projects with ease.
Launch in one click
Get your application up and running instantly with a preconfigured setup. No manual installation or complex setup steps.
Security you can rely on
Keep your applications protected with a built-in firewall, DDoS protection, and continuous monitoring.
Built in Docker manager
Run and manage multiple Docker containers from one place. Deploy, update, and monitor your projects with ease.