When a VPN app is the better choice
To hop between countries, a VPN app is the better answer: one subscription, many exit countries. A server here gives you one city and a tunnel that answers only to you.
wg-easy 15.4.0 Networking
Free credit available Limited time
A WireGuard VPS, with wg-easy ready before you sign in.
Your own WireGuard VPN, with wg-easy 15.4.0 already configured, deployed on a dedicated server Selfhost.dev provisions, secures and runs, across six locations on three continents. The panel's admin login is yours before first boot.
Your traffic exits where your server sits. Price that city first.
WireGuardone-click template ready
- wg-easy15.4.0, pinned
- adminset before first boot
- setup wizardclosed
- panelHTTPS only
- VPNUDP 51820
European 4 GB server$0.02/hr
The short version
What is a WireGuard VPS?
What it is
A rented server running WireGuard, the fast, modern VPN protocol, so your devices tunnel through an IP and a city you choose. wg-easy adds a web panel where each device gets its own config and QR code.
Where to start. Open the console with WireGuard selected
Who it is for
People and small teams who want their own VPN exit: safe browsing on public Wi-Fi or a way into private services.
When to use it
When one exit city that answers only to you matters more than a list of countries. To hop between countries, a VPN app fits better.
Server
What's in the WireGuard VPS deployment
What's in the WireGuard VPS deployment is one wg-easy container, pinned to 15.4.0, running both the WireGuard server and its web panel. Devices connect over UDP 51820; the panel sits behind HTTPS, with its admin login set before the container first starts.
The stack, end to end
Callers
Your phones, laptops and browser
Edge
HTTPS panel and UDP 51820
Your project server
Container
wg-easy 15.4.0
Platform secret
Admin login
Volume
Keys and devices
| Item | On this template |
|---|---|
| VPN and panel | ghcr.io/wg-easy/wg-easy 15.4.0, one container |
| VPN port | UDP 51820, open to the internet |
| Panel | HTTPS; your own domain optional |
| Admin | admin or your choice, with your deploy password |
| Server | 4 GB, in six locations |
| Rate | A European 4 GB server at $0.02/hr |
Your devices connect here. Deploy the stack
What we set up for you
wg-easy, ready on first boot
Most wg-easy guides still copy the pre-v15 setup: a PASSWORD or PASSWORD_HASH variable and a panel on plain HTTP at port 51821. Version 15 is a rewrite that drops both variables and opens a setup wizard for whoever visits first. Here the admin is set before first boot, on HTTPS.
| What a wg-easy guide has you do | On this template |
|---|---|
Set PASSWORD_HASH or beat strangers to the v15 wizard | Admin set before first boot |
| Set the server address for device configs | Set; every QR code points at your server |
Add a proxy or run HTTP with INSECURE=true | HTTPS on a generated address |
| Open UDP 51820, turn on IP forwarding | Done; only 22, 80, 443 and UDP 51820 open |
| Pick an image tag | 15.4.0, pinned |
Requirements
WireGuard server requirements
WireGuard server requirements are tiny: one core and 512 MB to 1 GB of RAM carry a personal VPN, as most guides say. Here the server starts at 4 GB, the smallest size our platform runs, with WireGuard's port already open.
What a WireGuard server needs
- Memory
- 4 GB, the smallest server we offer
- CPU
- x86 or ARM; wg-easy v15 supports both
- Disk
- 40 GB on the European 4 GB servers
- Network
- A public IP with UDP 51820 reachable
What a 4 GB server handles
WireGuard is one light workload. A project holds one WireGuard server, so the rest of a 4 GB server is room for other light apps.
Server size: 4 GB, enough for WireGuard. Deploy on a 4 GB server
Quickstart
How to deploy a WireGuard VPS in 3 steps
The admin is yours before the panel ever answers.
-
Pick a server and an exit city
Choose a 4 GB server in one of six cities, the place your traffic will appear to come from.
-
Set the admin password and launch
Set the admin username and password, then launch. The template deploys in about ten minutes, then the console shows the panel's HTTPS address.
-
Add a device and scan its QR code
Sign in, add a client in wg-easy and scan its QR code with the WireGuard app or download its config.
Deploy WireGuardStep 1 starts in the console.
Launch WireGuard Exit cities
WireGuard VPS cost, by exit location
WireGuard VPS cost here is the server alone: no template fee, nothing per device. The location you deploy in is where your traffic exits. It sets the rate, from $0.02/hr for a European server to $0.12/hr for a US one.
| Item | Cost |
|---|---|
| WireGuard and wg-easy | $0 |
| Devices and peers | $0, nothing per device |
| Bandwidth | $0, no traffic metering on a template project |
| Backups | Optional, +20% of the server rate |
| Server | RAM, cores, disk | Exit location | Rate | About a month |
|---|---|---|---|---|
cx23 | 4 GB, 2 cores, 40 GB | Europe | $0.02/hr | $15.18 |
cax11 (ARM) | 4 GB, 2 cores, 40 GB | Europe | $0.02/hr | $16.35 |
cpx22 | 4 GB, 2 cores, 80 GB | Singapore | $0.10/hr | $72.56 |
cpx21 | 4 GB, 3 cores, 80 GB | US | $0.12/hr | $87.75 |
Monthly figures assume 730 hours.
If your balance reaches zero
With a card on file or a past top-up, the server is powered off and held for 24 hours. Tunnels stay down until a top-up in that window restarts it. Welcome-credit-only servers are deleted at zero, backups included.
Price another exit city in the calculator, no signup.
Options
WireGuard VPS vs a budget VPS or a VPN app
A budget VPS runs WireGuard for a few dollars a month. A VPN app costs about as little, with dozens of exit countries. Either is cheaper for a VPN alone. A WireGuard VPS here adds the setup done, the panel secured and an exit only you control.
| Budget VPS | VPN app | WireGuard VPS here | |
|---|---|---|---|
| Setup | WireGuard, keys, firewall and panel are yours | None | Done before first boot |
| Exit IP | Yours, one location | Shared with other users | An IP nobody else uses, one of six cities |
| Commitment | Monthly or yearly plans | Usually yearly | By the hour; delete it any time |
Peers
What we run and what you run
We run
- The server, firewall and HTTPS
- wg-easy, on its deployed version
- Optional daily server backups
You run
- Your devices and who gets one
- When to move to a newer one
- The panel password and two-factor login
Status
What every WireGuard VPS deployment gets
- Every service is health-checked every 60 seconds.
- A stalled deploy is retried automatically, not abandoned.
- A deploy is never reported done until the URL actually answers.
- Retrying a create never leaves you paying for two copies.
- Your version never moves on its own.
~10 min to deploy
WireGuard's template deploys in about ten minutes. That is the platform's own budget, not an estimate.
Notes
WireGuard VPS limitations
- One exit city per server. A project holds one WireGuard server; a second country needs a second project in that location.
- Sized for the platform, not the tunnel. The smallest server is 4 GB, far more than WireGuard needs; the spare room suits other light apps.
- UDP only. Devices connect over UDP 51820, which some hotel and office networks block; this template has no TCP fallback.
None of these a dealbreaker? The template deploys in about ten minutes.
Launch WireGuardKeys
WireGuard VPS backup and restore
WireGuard VPS backup and restore comes down to one folder: wg-easy's data, holding the server keys and every device. Restore it on the same address and phones reconnect without new QR codes. An optional daily server image covers it. You can also copy it over SSH.
| Method | What it covers | Where it lives |
|---|---|---|
| Daily server backup (optional, +20%) | The whole server, keys and devices included, last 7 kept | With the server |
| A copy of wg-easy's data folder | Server keys and every device's config | Wherever you copy it |
Exit city
Choosing an exit city?
Tell us where you want your traffic to appear. We reply with the server there and its monthly cost.
Help
Frequently asked questions
Can I host my own VPN on a VPS?
Yes. WireGuard runs on almost any VPS. wg-easy adds a web panel for devices and QR codes. This template does it in one click: the admin is set before first boot, the panel is on HTTPS and UDP 51820 is already open.
Is wg-easy safe?
wg-easy is open source under AGPL-3.0, with password login and optional two-factor sign-in in version 15. The usual risk is the setup around it: a panel on plain HTTP or a first-run wizard open to anyone. Here the admin is set before first boot, on HTTPS.
What changed in wg-easy v15?
Version 15 is a complete rewrite. The PASSWORD and PASSWORD_HASH variables from older guides are gone: the admin is created in a setup wizard on first visit or with INIT variables set before the first start. A panel served over plain HTTP now needs INSECURE=true. This template handles all three for you.
How many devices can connect to my WireGuard VPS?
As many as you add as clients in wg-easy, with no per-device fee. Each device gets its own keys and config, so you can revoke one without touching the others. A household's phones and laptops use a fraction of a 4 GB server.
Does a WireGuard VPS work for streaming?
Sometimes. Streaming services often block datacenter IP addresses. A server's IP is one, so a show locked to another region may still refuse to play. A WireGuard VPS is better for safe browsing on public Wi-Fi than for getting round region locks.
Your own exit, one QR code away.
- An admin login nobody else can claim
- The city your traffic exits from, your choice
- One server bill, nothing per device
About Selfhost.dev
Selfhost.dev is a managed self hosting platform for developers and small teams. Open source apps and databases on dedicated servers you control, billed by the hour with no subscription tiers.
Best for: WireGuard, AdGuard Home, Vaultwarden, n8n and managed PostgreSQL, MySQL, Redis, ClickHouse, OpenSearch and Kafka.