# Tunnelry

> Tunnelry turns one Debian or Ubuntu server into a locked-down OpenVPN server. Install it, follow the wizard, give every device its own profile. Free and open source.

Facts about Tunnelry:
- What it is: a self-hosted web application and installer that turn one Debian 13 or Ubuntu 24.04 server into a locked-down OpenVPN server managed from a browser. It manages that one server (not several).
- Cost and license: free; free software under the AGPL-3.0-or-later. Everything that exists today stays free. Additional paid modules and a commercial license may be offered later. The source code is in every release archive.
- Languages: the interface and the documentation are in English and Polish; light and dark theme.
- Installation: download the signed release from https://updates.tunnelry.com/releases/<version>/ and run install.sh; the installer verifies the Ed25519 signature before installing anything.
- Not affiliated with OpenVPN Inc. (OpenVPN is its registered trademark). It supports OpenVPN only, not WireGuard.
- Contact: contact@tunnelry.com; security reports: security@tunnelry.com.

## Documentation (English)
- [Tunnelry user guide](https://tunnelry.com/docs/index.md): The Tunnelry user guide: install, set up and run your own OpenVPN server from a web page, step by step.
- [Installing](https://tunnelry.com/docs/install/index.md): Install Tunnelry on a fresh Debian 13 or Ubuntu 24.04 server: requirements, the installer, its options and what it changes on the server.
- [The setup wizard](https://tunnelry.com/docs/setup-wizard/index.md): The Tunnelry setup wizard step by step: administrator, system check, VPN settings, activation with automatic rollback, first profile.
- [Everyday use](https://tunnelry.com/docs/everyday-use/index.md): Everyday use of Tunnelry: VPN profiles, roles and access rules, the built-in DNS server, who is connected, server health, accounts and two-factor authentication.
- [Updating](https://tunnelry.com/docs/updating/index.md): Update Tunnelry from the web page or the console: signed releases, a copy of the database first, and automatic rollback if the new version does not start.
- [Backup and restore](https://tunnelry.com/docs/backup-and-restore/index.md): Make an encrypted backup of your Tunnelry server, restore it from the console, and move to a new server without invalidating any profile.
- [Access to the web interface, and getting back in](https://tunnelry.com/docs/access-and-recovery/index.md): Limit who can open the Tunnelry web interface, and get back in if you lock yourself out or lose your password or two-factor device.
- [Uninstalling and troubleshooting](https://tunnelry.com/docs/uninstall-and-troubleshooting/index.md): Remove Tunnelry, find out where to look when something does not work, and fixes for the most common problems.
- [Giving the server a static address](https://tunnelry.com/docs/static-address/index.md): Step by step: give the server a static address on Debian 13 or Ubuntu 24.04, so that the VPN keeps working when the router changes addresses.

## Dokumentacja (po polsku)
- [Przewodnik użytkownika Tunnelry](https://tunnelry.com/pl/docs/index.md): Przewodnik użytkownika Tunnelry: zainstaluj, skonfiguruj i prowadź własny serwer OpenVPN ze strony WWW, krok po kroku.
- [Instalacja](https://tunnelry.com/pl/docs/install/index.md): Instalacja Tunnelry na świeżym serwerze Debian 13 lub Ubuntu 24.04: wymagania, instalator, jego opcje i co zmienia na serwerze.
- [Kreator konfiguracji](https://tunnelry.com/pl/docs/setup-wizard/index.md): Kreator konfiguracji Tunnelry krok po kroku: administrator, kontrola systemu, ustawienia VPN, włączenie z automatycznym cofnięciem, pierwszy profil.
- [Codzienna obsługa](https://tunnelry.com/pl/docs/everyday-use/index.md): Codzienna obsługa Tunnelry: profile VPN, role i reguły dostępu, wbudowany serwer DNS, kto jest połączony, stan serwera, konta i uwierzytelnianie dwuskładnikowe.
- [Aktualizacje](https://tunnelry.com/pl/docs/updating/index.md): Aktualizacja Tunnelry ze strony WWW lub z konsoli: podpisane wydania, najpierw kopia bazy i automatyczne cofnięcie, jeśli nowa wersja nie wystartuje.
- [Kopia zapasowa i przywracanie](https://tunnelry.com/pl/docs/backup-and-restore/index.md): Szyfrowana kopia zapasowa serwera Tunnelry, przywracanie z konsoli i przeprowadzka na nowy serwer bez unieważniania profili.
- [Dostęp do interfejsu WWW i odzyskiwanie dostępu](https://tunnelry.com/pl/docs/access-and-recovery/index.md): Ograniczanie, kto może otworzyć interfejs WWW Tunnelry, i odzyskiwanie dostępu po utracie hasła lub urządzenia z 2FA.
- [Odinstalowanie i rozwiązywanie problemów](https://tunnelry.com/pl/docs/uninstall-and-troubleshooting/index.md): Odinstalowanie Tunnelry, gdzie szukać przyczyn, gdy coś nie działa, i rozwiązania najczęstszych problemów.
- [Stały adres serwera](https://tunnelry.com/pl/docs/static-address/index.md): Krok po kroku: stały adres serwera na Debianie 13 lub Ubuntu 24.04, żeby VPN działał, gdy router zmieni adresy.

## Pages
- [Download and install](https://tunnelry.com/install/): requirements, how to download, verify and install a release
- [Privacy and operator](https://tunnelry.com/privacy/): who runs the site, what the server records, your rights
- [License and premium modules](https://tunnelry.com/license/): what the AGPL-3.0 means for users, commercial licenses, planned paid modules
- [Security policy](https://tunnelry.com/security/): how to report a vulnerability
- [Full English guide in one file](https://tunnelry.com/llms-full.txt)
- [Pełny przewodnik po polsku w jednym pliku](https://tunnelry.com/pl/llms-full.txt)