# Defguard

Defguard is a self-hosted secure remote access platform that combines WireGuard virtual private network (VPN), identity and access management, multi-factor authentication, and network access control. It is open source and self-hosted, installable on Proxmox.

Canonical page: https://ourlocalhost.com/app/7281/defguard

## Description

Defguard is a self-hosted secure remote access platform that combines WireGuard virtual private network (VPN), identity and access management, multi-factor authentication, and network access control. It helps homelabbers and small teams centralize user enrollment, enforce multi-factor authentication, and control access to private networks, servers, and applications.

## Platform availability

Available on 2 of 9 platforms: Proxmox, Mac.

## Desktop and other devices

Mac.

## Health score

76/100 (Good), based on 3 of 4 factors.
- Maintained: 100 (last commit 1 day ago)
- Popular: 69 (2,882 GitHub stars)
- Easy to install: 35 (2 install platforms, install notes)

## Links

- Proxmox: https://community-scripts.github.io/ProxmoxVE/scripts?id=defguard
- GitHub: https://github.com/DefGuard/defguard
- Documentation: https://docs.defguard.net
- Official website: https://defguard.net
- desktop: https://github.com/DefGuard/defguard/releases/latest

## Common questions

### Which ports need to be reachable in a Docker-style Defguard deployment?

Keep ports 8000 and 50055 reachable from your devices. Port 5432 is used for the database in the Docker example, and blocking 8000 or 50055 can prevent the web interface or VPN clients from connecting.

### Why might the Defguard CLI client not connect after successful enrollment?

The client service may not be running. Run systemctl start dg after enrollment is complete, otherwise the client may not connect even though enrollment looks successful.

### Does the Proxmox installation script deploy the entire Defguard stack?

No, the script installs the Defguard Core service. Gateways are deployed separately.

### Is there a documented path for putting Defguard behind a reverse proxy?

Yes, the documentation includes a reverse proxy configuration guide using NGINX.

### Is there a guide for migrating from Defguard 1.6 to 2.0?

Yes, the documentation includes a tutorial for migrating from Defguard 1.6 to 2.0.

---
Source: Our Local Host (https://ourlocalhost.com/app/7281/defguard), the self-hosted and open-source app directory.