example_config.json

{
    "Lockout": 5,
    "HelpMail": "help@example.com",
    "MaxSessionLifetimeMinutes": 2,
    "SessionInactivityTimeoutMinutes": 1,
    "ExternalAddress": "192.168.121.61",
    "DatabaseLocation": "devices.db",
    "Socket": "/tmp/wag.sock",
    "Webserver": {
        "Public": {
            "ListenAddress": ":8081"
        },
        "Tunnel": {
            "Port": "8080"
        }
    },
    "ManagementUI": {
        "ListenAddress": "127.0.0.1:4433",
        "Enabled": true
    },
    "Authenticators": {
        "Issuer": "vpn.test",
        "DomainURL": "https://vpn.test:8080",
        "DefaultMethod": "",
        "Methods": [
            "totp",
            "webauthn",
            "oidc"
        ],
        "OIDC": {
            "IssuerURL": "http://localhost:8080/",
            "ClientSecret": "AN EXAMPLE KEY",
            "ClientID": "account",
            "GroupsClaimName": "groups"
        },
        "PAM": {
            "ServiceName": "vpncheckpass"
        }
    },
    "Wireguard": {
        "DevName": "wg0",
        "ListenPort": 53230,
        "PrivateKey": "AN EXAMPLE KEY",
        "Address": "192.168.1.1/24",
        "MTU": 1420,
        "DNS": [
            "1.1.1.1/32"
        ]
    },
    "Acls": {
        "Groups": {
            "group:nerds": [
                "toaster",
                "tester",
                "abc"
            ],
            "group:administrators": [
                "toaster",
                "tester"
            ]
        },
        "Policies": {
            "*": {
                "Allow": [
                    "7.7.7.7",
                    "google.com"
                ]
            },
            "group:nerds": {
                "Mfa": [
                    "192.168.3.4/32"
                ],
                "Allow": [
                    "192.168.3.5/32"
                ]
            },
            "tester": {
                "Mfa": [
                    "192.168.3.0/24",
                    "192.168.5.0/24"
                ],
                "Allow": [
                    "4.3.3.3/32"
                ]
            },
            "group:administrators": {
                "Mfa": [
                    "8.8.8.8"
                ]
            },
            "toaster": {
                "Allow": [
                    "1.1.1.1/32"
                ]
            }
        }
    }
}