[GH-ISSUE #510] Feature request: Wireguard Client Implementation #873

New Issue

sascha_hemi · 2026-03-20T18:13:53+01:00

sascha_hemi commented

2026-03-20 18:13:53 +01:00

Originally created by @aiakos-k on GitHub (Oct 6, 2025).
Original GitHub issue: https://github.com/OpenEPaperLink/OpenEPaperLink/issues/510

Is your feature request related to a problem? Please describe.
I would like to connect my OpenEPaperLink AP to my Home Assistant instance over a secure WireGuard VPN. Currently, I can only access and manage the AP when I’m on the same local network; I want a secure, reliable way to reach it remotely without exposing services to the internet.

Describe the solution you'd like
Please add a WireGuard client to the existing OpenEPaperLink AP firmware. The AP should be able to initiate an outbound WireGuard tunnel to a configured server (Home Assistant or a WireGuard gateway). Ideally, this is configurable via the web UI and/or a config file:

Server endpoint (host:port)
Public/private keys
AllowedIPs (ideally limited to the Home Assistant IP/subnet)
Persistent keepalive
Optional DNS settings The tunnel should auto-start on boot, reconnect on network changes, and survive firmware updates (preserve keys/config).

Describe alternatives you've considered

Running WireGuard on my router for a site-to-site tunnel. Works, but requires router changes and affects the whole network.
Using a Home Assistant add-on (WireGuard/Tailscale/ZeroTier) and keeping the AP behind NAT. Adds moving parts and may require additional ports or agents.
Exposing the AP via a reverse proxy with TLS. Not preferred from a security standpoint.

Additional context
Device: OpenEPaperLink AP
Goal: Manage and monitor the AP and ePaper tags from Home Assistant when away from home via VPN, with minimal exposure.
Nice to have: small footprint (e.g., wg-quick or equivalent), status indicator in the AP UI (connected/disconnected) and logs for troubleshooting

Originally created by @aiakos-k on GitHub (Oct 6, 2025). Original GitHub issue: https://github.com/OpenEPaperLink/OpenEPaperLink/issues/510 **Is your feature request related to a problem? Please describe.** I would like to connect my OpenEPaperLink AP to my Home Assistant instance over a secure WireGuard VPN. Currently, I can only access and manage the AP when I’m on the same local network; I want a secure, reliable way to reach it remotely without exposing services to the internet. **Describe the solution you'd like** Please add a WireGuard client to the existing OpenEPaperLink AP firmware. The AP should be able to initiate an outbound WireGuard tunnel to a configured server (Home Assistant or a WireGuard gateway). Ideally, this is configurable via the web UI and/or a config file: - Server endpoint (host:port) - Public/private keys - AllowedIPs (ideally limited to the Home Assistant IP/subnet) - Persistent keepalive - Optional DNS settings The tunnel should auto-start on boot, reconnect on network changes, and survive firmware updates (preserve keys/config). **Describe alternatives you've considered** - Running WireGuard on my router for a site-to-site tunnel. Works, but requires router changes and affects the whole network. - Using a Home Assistant add-on (WireGuard/Tailscale/ZeroTier) and keeping the AP behind NAT. Adds moving parts and may require additional ports or agents. - Exposing the AP via a reverse proxy with TLS. Not preferred from a security standpoint. **Additional context** Device: OpenEPaperLink AP Goal: Manage and monitor the AP and ePaper tags from Home Assistant when away from home via VPN, with minimal exposure. Nice to have: small footprint (e.g., wg-quick or equivalent), status indicator in the AP UI (connected/disconnected) and logs for troubleshooting

sascha_hemi added the enhancement label 2026-03-20 18:13:53 +01:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/OpenEPaperLink#873