WireGuard VPN Account Provisioning for WHMCS

What will the WireGuard module do?

It lets you sell VPN access on WireGuard servers you run yourself and bill it in WHMCS. When an order is paid, the module creates a key pair and a tunnel address for each device the plan allows, and a small agent on the chosen VPN server adds those peers to its WireGuard interface. The customer opens the service in the client area and downloads a ready config file for each device, or scans its QR code with the WireGuard app on a phone. When the service is suspended or terminated, the peers come off the server.

This product is built to order: you get the license key after a manual account check (up to 24 hours) and the download within 15 business days.

What does WHMCS already do, and what does this add?

WHMCS resells NordVPN through MarketConnect, which creates accounts on NordVPN's own network, and it can spread services across servers with server groups. It has no way to create VPN access on servers you operate and no WireGuard support. This module adds that: each VPN server becomes a server in WHMCS, and the module manages peers, keys, addresses and configs for the services placed on it.

What is included?

Who is it for?

Hosting companies and network operators that already run WireGuard servers, or want to, and would rather sell VPN access under their own brand than resell someone else's network. Without a module, every new customer means logging in to a server, generating keys, editing the interface and sending a config file by hand, and an unpaid customer keeps working until someone remembers to remove them.

How does the agent keep the servers safe?

WHMCS never holds an SSH login for your VPN servers. The agent is the only part that changes WireGuard, it listens on a port you open to your WHMCS server alone, and it rejects any request that is not signed with that server's shared secret or that arrives too late to be fresh. It adds and removes peers on the running interface and saves the change, so peers survive a restart. Private keys are stored encrypted in WHMCS, so a customer can download a config again later.

What do you need, and what are the limits?

Requirements: WHMCS 8.13 or 9.x (I confirm your exact version at purchase), PHP 8.1 or newer, and Linux VPN servers with WireGuard installed, an interface set up and root access to install the agent as a systemd service.

Limits: you set up each server's WireGuard interface, forwarding, NAT and firewall; the agent manages peers on it. The module does not meter or cap bandwidth, limit speed, log customer traffic or supply apps, and it covers WireGuard only, not OpenVPN or IPsec. Running a VPN service is subject to the law where your servers sit, so publish an acceptable use policy.

It costs $99 once for a lifetime license with twelve months of updates and support, and a seven-day refund window. I check each account by hand, which can take up to 24 hours, before the license key is issued, and the download follows within 15 business days of purchase.